Results for “ssrf”
11 skills
shulkwisec xxe
Detect and exploit XML External Entity (XXE) injection vulnerabilities in XML parsers, including file disclosure, SSRF, and blind out-of-band exfiltration.
21
mukul975 auditing-mcp-servers-for-tool-poisoning
Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.
24.6k · bundle
mukul975 exploiting-api-injection-vulnerabilities
Tests APIs for injection vulnerabilities including SQL, NoSQL, OS command, LDAP, and SSRF through parameters, headers, and request bodies.
24.6k · bundle
vikingokft wp-security-deep
Audits WordPress plugin and theme PHP code for advanced security issues beyond basic sanitization, including object injection, SSRF, CSRF, mass assignment, file inclusion, mail header injection, ZipSlip, type juggling, and TOCTOU races.
0
More results
zhaoxuya520 cloud-k8s
Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.
12.8k · bundle
addyosmani security-and-hardening
Hardens code against vulnerabilities by applying threat modeling, OWASP Top 10 prevention patterns, and secure coding practices for web applications.
69.5k
zhaoxuya520 radio-sdr
Guides authorized RF/SDR security research for signal identification, demodulation analysis, and replay feasibility studies in shielded lab environments.
12.8k · bundle
zhaoxuya520 src-hunter
Provides a structured 5-phase workflow for bug bounty and SRC vulnerability hunting, including 19 attack-type playbooks, 305 structured payloads, 263 WAF bypass variants, and 2,887 real HackerOne case studies.
12.8k · bundle
mukul975 performing-graphql-security-assessment
Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
24.6k · bundle
mukul975 testing-for-xml-injection-vulnerabilities
Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks to identify data exposure and server-side request forgery risks.
24.6k · bundle
tinh2 pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13