See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

lorsrf

LORSRF - 2.1 Lorsrf 是一款强大的 Web 渗透测试工具，旨在识别可用于 SSRF 或带外资源加载攻击的参数。通过向参数值中添加 OAST 主机（如 Burp Collaborator），Lorsrf 可以生成一个 HTTP 请求，该请求会被 Burp Collaborator 接收，而无需任何有关目标的实际信息。 为了解决这个问题，Lorsrf 包含一个功能，允许您将特定的目标信息片段作为变量添加到 OAST 主机中。这使您能够更轻松地识别易受攻击的参数和端点，最终让您更便捷地保护 Web 应用。 此外，Lorsrf 还允许您使用特殊变量在 OAST...

SSRFire

SSRFIRE An automated SSRF finder. Just give the domain name and your server and chill! ; It also has options to find XSS and open redirects. Syntax ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- The domain for which you want to test yourserver.com ---...

autossrf

Summary autoSSRF is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features : Smart fuzzing on relevant SSRF GET parameters When fuzzing, autoSSRF only focuses on the common parameters relate...

BurpParamFlagger

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI. Note: I believe that Burp Pro is required to use this extension, since it adds onto the scanner functionality, which isn't included in the...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon have a...

ssrf-king

🔥 ssrf-king 🔥 v1.12 最新版 用于Burp的SSRF插件，自动化检测所有请求中的SSRF漏洞 如果您遇到任何问题，或者想要下面未列出的新功能 请在此表单下方创建一个新的Issue 创建新Issue 即将推出的功能清单 ✔️ 即将提供用户界面，用于指定你自己的回调payload 即将能够测试JSON和XML 测试SMTP SSRF 如何安装/构建 git clone https://github.com/ethicalhackingplayground/ssrf-king gradle build 现在可以在 build/libs 下找到 "ssrf-king.jar"...

extended-ssrf-search

扩展SSRF搜索 该工具使用预定义设置搜索请求的不同部分（路径、主机、头信息、POST和GET参数）中的SSRF漏洞。 第一步 将example.app-settings.conf重命名为app-settings.conf并调整设置。最重要的设置是回调URL。我建议使用burp collaborator。 然后，您可以将您的URL添加到config/url-to-test.txt。脚本接受域名以及带有路径和查询参数的URL。...

BurpSuite-For-Pentester

🕷️ BurpSuite para Pentester Una chuleta práctica de Burp Suite y guía de aprendizaje diseñada para cazadores de bug bounty y pentesters, con el fin de descubrir de forma eficiente vulnerabilidades en aplicaciones web, desde severidad baja P4 hasta crítica P1, utilizando Burp Suite. Este repositori...

auditor-v1

🔐 Web Security Auditor v2.0 Mini BurpSuite / OWASP ZAP hech...

PodcastGenerator 3.2.9 - Blind SSRF via XML Injection Vulnerability

Exploit Title: PodcastGenerator 3.2.9 - Blind SSRF via XML Injection Application: PodcastGenerator Version: v3.2.9 Bugs: Blind SSRF via XML Injection Technology: PHP Vendor URL: https://podcastgenerator.net/ Software Link: https://github.com/PodcastGenerator/PodcastGenerator Date of found:...