domains / families / security / offensive-ssrf

offensive-ssrf

separate

A testing checklist for Server-Side Request Forgery (SSRF) covering discovery, blind SSRF detection, cloud metadata access, filter bypasses, and RCE escalation.

When to use

• SSRF discovery
• blind SSRF with out-of-band
• cloud metadata endpoints (AWS/GCP/Azure)
• SSRF filter bypass techniques
• SSRF to RCE escalation
• web app SSRF testing
• bug bounty

Skill page

Source