Server-Side Request Forgery (SSRF)

Detects HTTP requests made with user-controlled URLs, potentially allowing internal network access.

zakirkun ff4f6af 2 files · 2.1 KB Updated

File contents

Server-Side Request Forgery (SSRF)

Overview

Detects HTTP requests made with user-controlled URLs, potentially allowing internal network access.

Remediation

Validate URLs against a strict allowlist. Do not permit access to loopback or private IP ranges.

zakirkun/ice-tea/tree/main/skills/web/ssrf commit ff4f6af459

Frequently asked questions

npx skillmds@latest add zakirkun/server-side-request-forgery-ssrf