ssrf-scanner 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..
an exploit of Server-side request forgery (SSRF)
A Complete SSRF (Server Side Request Forgery) Scanner.
SSRF-Scanner Tool
A web crawler and vulnerability scanner tool developed by Rohit Ajariwal
ssrfceptor by b0dj0x
A versatile SSRF vulnerability exploitation and testing framework
Server-Side Request Forgery (SSRF) remains one of the most dangerous and evolving attack vectors in cybersecurity. As cloud-native architectures, AI-driven applications, and zero-trust models gain traction, SSRF techniques have adapted to bypass traditional defenses.
Header-based SSRF (scanner-for-debugging) fuzzing utility inspired by a HackerOne Blind SSRF report. Automates injection of Forwarded-type headers, detects time-delay behavior and 429 responses, supports authenticated flows, logs results, and optionally integrates Telegram notifications for controlled security testing.
🚀 Next-Gen AI Vulnerability Scanner for Burp Suite powered by Claude 3.7. Detect Critical SQLi, XSS Bypass, and SSRF with 90% less false positives!
SSRFForge is a high-performance, asynchronous security framework designed for the automated discovery and advanced exploitation of Server-Side Request Forgery (SSRF) vulnerabilities. It serves as a more powerful and modular alternative to legacy tools like SSRFmap.
SSRFHunter Pro is an enterprise-grade SSRF security assessment framework designed for authorized security testing, penetration testing with permission, security research, and education.
SSRF stands for Server-Side Request Forgery. It's a web security vulnerability that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.