Skip to content

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

Notifications You must be signed in to change notification settings

random-robbie/ssrf-finder

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 

Repository files navigation

ssrf-finder

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

cat urls.txt | ./ssrf-finder

or

echo https://www.someting.com/?url=FUZZ&whatever=adsa&id=1  | ./ssrf-finder

if it generates a ssrf.log file then you have some SSRF's if not no SSRF.

URLs must look like.

http://www.something.com/url?=FUZZ&somethingelse=whatever

99% of this code is from @tomnomnom the hero!

raise issues if you have questions!

Use a VPS from DO

DigitalOcean Referral Badge

About

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages