Chain Ssrf To Rce

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

purpleailab Updated

File contents

Chain: SSRF to RCE

Canonical path

  1. SSRF reaches metadata/internal control plane.
  2. Extract credential/token or access internal admin API.
  3. Use credential to deploy or execute payload.
  4. Confirm code execution and business impact.

Graph guidance

  • Add enables edges for each pivot.
  • Lower weights for direct pivots; higher for speculative pivots.
  • Run plan_attack_chains and then suggest_objectives_from_chains.

purpleailab/decepticon/tree/main/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce commit fd1941fde3

Frequently asked questions

npx skillmds@latest add purpleailab/chain-ssrf-to-rce