Checks for SSRF using built-in custom Payloads after fetching URLs from Multiple Passive Sources & applying complex patterns aimed at SSRF

an exploit of Server-side request forgery (SSRF)

An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.

A Complete SSRF (Server Side Request Forgery) Scanner.

An SSRF Handler for C# HttpClient and ClientWebSocket

Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.

POC for CVE-2021-22214: Gitlab SSRF

Abusing data source creation mechanism to scan hosts in the network

Header-based SSRF (scanner-for-debugging) fuzzing utility inspired by a HackerOne Blind SSRF report. Automates injection of Forwarded-type headers, detects time-delay behavior and 429 responses, supports authenticated flows, logs results, and optionally integrates Telegram notifications for controlled security testing.

Simple python script to detect OOB Interactions (Probable Blind-SSRF and OOB SQL Injections)

An automated tool for discovering vulnerabilities in GraphQL applications through fuzzing techniques, including OS Command Injection and XSS, with a focus on OWASP Top Ten vulnerabilities.

Just an automation of XSS, SSRF, and LFI tester for Web Application

Simple flask app to demonstrate Server-Side Request Forgery (SSRF) attack

Server-Side Request Forgery (SSRF) remains one of the most dangerous and evolving attack vectors in cybersecurity. As cloud-native architectures, AI-driven applications, and zero-trust models gain traction, SSRF techniques have adapted to bypass traditional defenses.

SSRF-Scanner Tool

A versatile SSRF vulnerability exploitation and testing framework

SSRF stands for Server-Side Request Forgery. It's a web security vulnerability that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

SSRFForge is a high-performance, asynchronous security framework designed for the automated discovery and advanced exploitation of Server-Side Request Forgery (SSRF) vulnerabilities. It serves as a more powerful and modular alternative to legacy tools like SSRFmap.

Complete SSRF Security Guide