ssrf-server-side-request-forgery — Skills

What it does

WebLogic SSRF (CVE-2014-4210) — uddiexplorer/SearchPublicRegistries.jsp + operator parameter + %0D%0A CRLF to inject Redis commands

SSRF → internal Redis → write crontab reverse shell complete payload chain

DNS Rebinding deep dive — TTL=0 trick, initial-legit→second-internal resolution, rbndr.us service

Kubernetes SSRF (CVE-2020-8555) and bypass (CVE-2020-8562) via DNS rebinding

SSRF through PDF/screenshot generators — <iframe> and <img> in HTML-to-PDF

Gopher protocol full TCP injection — Redis, MySQL, FastCGI payloads via Gopherus

URL parser confusion for filter bypass — #@, \@, %00@, IPv6-mapped IPv4

ssrf server side request forgery

Source

Repository: https://github.com/yaklang/hack-skills

ssrf-server-side-request-forgery FAQ

What does the ssrf-server-side-request-forgery skill do?

>- SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven toward internal networks, cloud metadata, or secondary protocols. WebLogic SSRF (CVE-2014-4210) — uddiexplorer/SearchPublicRegistries.jsp + operator parameter + %0D%0A CRLF to inject Redis commands SSRF → internal Redis → write crontab reverse shell complete payload chain

What does ssrf-server-side-request-forgery require?

Also load SCENARIOS.md when you need: Also load URLPARSERTRICKS.md when you need: AWS IMDSv2 (token required — but check if SSRF can GET the token) Step 1: PUT http://169.254.169.254/latest/api/token Header: X-aws-ec2-metadata-token-ttl-seconds: 21600 Configuration keys: DOCTYPE.

How do I install ssrf-server-side-request-forgery?

Run: npx -y skills add https://github.com/yaklang/hack-skills --skill ssrf-server-side-request-forgery --agent claude-code — the source lives at github.com/yaklang/hack-skills.

Maintain ssrf-server-side-request-forgery?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[ssrf-server-side-request-forgery on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-ssrf-server-side-request-forgery?ref=badge)

npx agentictools info skills/yaklang-hack-skills-ssrf-server-side-request-forgery

The second line is the CLI lookup for this page — handy in READMEs and docs.