#

ssrf

Here are 106 public repositories matching this topic...

nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

education hackers hacking xss bug-bounty web-security pentest ssrf bug-bounty-hunters learn2hack

Updated Jun 15, 2022

tarunkant / Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

mysql redis postgresql zabbix rce smtp gopher memcache fastcgi ssrf github-rce

Updated Sep 20, 2021
Python

cujanovic / SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

pentesting pentest ssrf pentest-tool server-side-request-forgery

Updated Mar 9, 2022
Python

swisskyrepo / SSRFmap

Sponsor

Automatic SSRF fuzzer and exploitation tool

vulnerability ctf pentest exploitation hacktoberfest ssrf server-side-request-forgery ssrfmap

Updated Mar 23, 2022
Python

JoyChou93 / java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

java cors security benchmark web code tomcat jsonp rmi rce deserialize sqli ssrf xxe spel

Updated Jun 29, 2022
Java

reddelexc / hackerone-reports

Top disclosed reports from HackerOne

security xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

Updated Jun 23, 2022
Python

cn-panda / JavaCodeAudit

Getting started with java code auditing 代码审计入门的小项目

java sql code xss jackson rce fastjson ssrf weblogic vulnerability-analysis

Updated Jul 6, 2022
JavaScript

YagamiiLight / Cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

python middleware proxy waf xss penetration-testing sql-injection bypass hacking-tool ssrf security-tools websecurity

Updated Jan 5, 2020
Python

incredibleindishell / SSRF_Vulnerable_Lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

attack lab hacking web-security exploitation ssrf server-side-request-forgery

Updated May 22, 2021
PHP

xxexploiter

luisfontes19 / xxexploiter

Tool to help exploit XXE vulnerabilities

cdata exploit command xml read file entities external exploitation expect dtd xee ssrf xxe oob exection

Updated Jun 1, 2022
TypeScript

chennqqi / godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

xss rce vulnerability ssrf rfi xxe dnslog webscan

Updated Mar 14, 2022
Go

Dliv3 / redis-rogue-server

Redis 4.x/5.x RCE

redis rce ssrf remote-code-execution redis-rogue-server redis-unauthorized-access

Updated Dec 6, 2020
Python

bcoles / ssrf_proxy

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

magic proxy ssrf ssrf-proxy

Updated Jan 1, 2018
Ruby

Li4n0 / revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

rce bug-bounty ssrf xxe pentest-tool dnslog out-of-band oob reverse-connection

Updated Jan 16, 2022
Go

teknogeek / ssrf-sheriff

A simple SSRF-testing sheriff written in Go

go bugbounty ssrf

Updated May 24, 2020
Go

tangxiaofeng7 / SecExample

JAVA 漏洞靶场 (Vulnerability Environment For Java)

java docker cors rce vulnerability csrf xss-vulnerability springboot fastjson ssrf sqlinjection

Updated Jul 15, 2021
HTML

pikpikcu / XRCross

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

cors coffee rce sqli xss-vulnerability recon bugbounty xss-scanner scanners ssrf lfi takeover-subdomain subdomain-enumeration cors-scanner bugbounty-tool check-subdomains

Updated Sep 6, 2020
Shell

sqlsec / ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

ssrf websecurity vulhub

Updated May 10, 2021
PHP

Tr3jer / dnsAutoRebinding

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

dns ssrf rebinding

Updated Aug 17, 2017
Python

random-robbie / Jira-Scan

CVE-2017-9506 - SSRF

jira bugbounty ssrf

Updated Feb 14, 2022
Python

knassar702 / lorsrf

find the parameters that can be used to find SSRF or Out-of-band resource load

rust hacking bruteforce penetration-testing fuzzing pentesting bugbounty ssrf websecurity blindssrf

Updated Apr 8, 2022
Rust

dwisiswant0 / proxylogscan

Sponsor

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

microsoft-exchange microsoft-exchange-server ssrf proxylogon cve-2021-26855 cve-2021-27065 microsoft-exchange-proxylogon

Updated Mar 2, 2022
Go

ryandamour / ssrfuzz

Open

Handle POST data

ryandamour commented Feb 14, 2021

So as it stands, we can send "POST" requests, but this doesn't do us much good if we can't send the appropriate data with the request. This should probably be similar to curl's flags, (ie: --data and -d).

Read more

good first issue

Open

Host header fuzzing

storenth / lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

osint sqli fuzzing infosec recon bugbounty ssrf lfi security-automation reconnaissance arsenal vulnerability-scanner bhusa

Updated Feb 16, 2022
Shell

herwonowr / exprolog

ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

poc rce microsoft-exchange ssrf proxylogon cve-2021-26855 cve-2021-27065 microsoft-exchange-proxylogon

Updated Oct 19, 2021
Python

0xAwali / Blind-SSRF

Nuclei Templates to reproduce Cracking the lens's Research

web-security nuclei bugbounty ssrf nuclei-templates blindssrf

Updated Jan 8, 2022

BitTheByte / Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

python ftp hacking xss bugbounty cve takeover bugcrowd ssrf hackerone

Updated Jan 28, 2021
Python

terjanq / Flag-Capture

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

competition web sql-injection csrf ctf capture-the-flag ssrf xss-injection css-injection

Updated Sep 21, 2020
HTML

Al1ex / CVE-2020-36179

CVE-2020-36179~82 Jackson-databind SSRF&RCE

rce ssrf jackson-databind cve-2020-36179

Updated Jan 10, 2021

k8gege / ZimbraExploit

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

exploit upload poc rce zimbra ssrf 0day xxe getshell k8cscan cve-2019-9621

Updated May 8, 2019
Ruby

Improve this page

Add a description, image, and links to the ssrf topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ssrf topic, visit your repo's landing page and select "manage topics."