• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

ssrf

  1. itsMe

    TProxer: Burp Suite extension to find reverse proxy path based SSRF

    A Burp Suite extension was made to automate the process of finding reverse proxy path-based SSRF. Hidden content
  2. itsMe

    BurpParamFlagger: indicate a possible insertion point for SSRF or LFI

    BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI. Note: I believe that Burp Pro is required to use this extension since it adds to the scanner functionality, which isn’t included in the...
  3. itsMe

    ssrf-king: Automates SSRF Detection in all of the Request

    ssrf-king SSRF plugin for burp that Automates SSRF Detection in all of the Request Upcoming Features Checklist     ✔️ It will soon have a user Interface to specify your own call back payload     It will soon be able to test Json & XML Features     ✔️ Test all of the requests for any...
  4. itsMe

    lorsrf: Bruteforcing on Hidden parameters to find SSRF vulnerability

    lorsrf Bruteforcing on Hidden parameters to find SSRF vulnerability using GET and POST Methods. Hidden content
  5. itsMe

    SSRFire: automated SSRF finder

    SSRFIRE An automated SSRF finder. Just give the domain name and your server and chill! 😉 It also has options to find XSS and open redirects. Finding XSS Warning: This generates a lot of traffic. Do not use this against the sites which you are not authorized to test This tests all the URLs...
  6. 1

    Exploits Open-Xchange OX App Suite SSRF / XSS / Information Disclosure / Access Controls

    Various Open-Xchange OX App Suite versions suffer from server-side request forgery, cross site scripting, information disclosure, and improper access control vulnerabilities. View the full article
  7. dEEpEst

    SSRF Vulnerable Lab

    Server-Side Request Forgery (SSRF) vulnerable Lab This repository contain PHP codes which are vulnerable to Server-Side Request Forgery (SSRF) attack. I would like to say Thank You to @albinowax, AKReddy, Vivek Sir (For being great personalities who always supported me), Andrew Sir -...
  8. 0x1

    Tools B-XSSRF

    Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP Upload the files to your server. Create a Database and upload database.sql file to it. Change the DB Credentials in db.php file. Ready. USAGE BLIND XSS <embed...
  9. 1

    Exploits Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF

    This Metasploit module exploits an XML external entity vulnerability and a server side request forgery to get unauthenticated code execution on Zimbra Collaboration Suite. The XML external entity vulnerability in the Autodiscover Servlet is used to read a Zimbra configuration file that contains...
  10. itsMe

    SSRFmap - Automatic SSRF Fuzzer And Exploitation Tool

    SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Hidden content
  11. 1

    Exploits Open-Xchange OX App Suite Cross Site Scripting / SSRF

    Open-Xchange OX App Suite suffers from cross site scripting and server-side request forgery vulnerabilities. The vulnerabilities spawn a multitude of versions. View the full article
Back
Top