ssrf-testing
Methodology for detecting and mitigating SSRF vulnerabilities in web applications.
Install
mkdir -p .claude/skills/ssrf-testing && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2928" && unzip -o skill.zip -d .claude/skills/ssrf-testing && rm skill.zipInstalls to .claude/skills/ssrf-testing
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
SSRF服务器端请求伪造测试的专业技能和方法论Key capabilities
- →Identify SSRF entry points
- →Test local loopback and internal IP access
- →Verify cloud metadata endpoint vulnerability
- →Perform port scanning via SSRF
- →Test URL parameter sanitization
How it works
The skill employs various techniques including protocol manipulation, IP encoding, and cloud metadata requests to probe for server-side request forgery.
Inputs & outputs
When to use ssrf-testing
- →Scanning for internal network access
- →Testing cloud metadata endpoint vulnerability
- →Verifying URL parameter sanitization
- →Attempting local file reading via SSRF
About ssrf-testing
Provides testing procedures to identify SSRF entry points such as Webhooks, API proxies, and file uploads. Includes techniques for testing local loopbacks, internal IP scanning, and cloud metadata access.
SSRF服务器端请求伪造测试的专业技能和方法论
When not to use it
- →Production environment testing without authorization
- →General web application security scanning
Prerequisites
Limitations
- →Requires explicit authorization for testing
- →Effectiveness depends on target application configuration
How it compares
It provides a structured methodology for SSRF testing compared to manual, unguided URL manipulation.
Compared to similar skills
ssrf-testing side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| ssrf-testing (this skill) | 1 | 7mo | Review | Advanced |
| reverse-engineering-tools | 73 | 4mo | No flags | Advanced |
| game-hacking-techniques | 42 | 2mo | No flags | Advanced |
| solidity-security | 15 | 2mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by Ed1s0nZ
View all by Ed1s0nZ →You might also like
reverse-engineering-tools
gmh5225
Guide for reverse engineering tools and techniques used in game security research. Use this skill when working with debuggers, disassemblers, memory analysis tools, binary analysis, or decompilers for game security research.
game-hacking-techniques
gmh5225
Guide for game hacking techniques and cheat development. Use this skill when researching memory manipulation, code injection, ESP/aimbot development, overlay rendering, or game exploitation methodologies.
solidity-security
wshobson
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
1password
openclaw
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
senior-security
davila7
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
ghidra
mitsuhiko
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.