ssrf tools on offsec.tools

A tool to automatically generate alternative IP representations.

Checks for SSRF using custom payloads after fetching URLs from sources & applying complex patterns.

Smart context-based SSRF vulnerability scanner.

differer finds how URLs are parsed by different languages in order to help bug hunters break filters.

Detect Vulnerable SSRF parameters.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.

Searching for Sentry config on page or in Javascript files and check blind SSRF.

Authenticated SSRF in Grafana.

Server-side request forgery detector.

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.

Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.

A simple SSRF-testing sheriff written in Go.

Automatic tool for DNS rebinding-based SSRF attacks.

An automated SSRF finder. Just give the domain name and your server and chill!

Generates gopher link for exploiting SSRF and gaining RCE in various servers.

Automatic SSRF fuzzer and exploitation tool.

SSRF testing tool.

#ssrf