domains / families / security / phy-ssrf-audit

phy-ssrf-audit

separate

Server-Side Request Forgery (SSRF) vulnerability scanner (OWASP A10:2021). Detects URL-fetching sinks in Python/Java/Node.js/PHP/Go/Ruby that accept user-controlled URLs without validation. Flags cloud metadata endpoint access (AWS IMDS 169.254.169.254, GCP metadata.google.internal, Azure IMDS), DNS rebinding exposure, missing allowlist checks. Outputs CWE-918 findings with HTTP taint analysis and per-framework fix snippets. Zero competitors on ClawHub.

When to use

• Detecting URL-fetching sinks in Python, Java, Node.js, PHP, Go, and Ruby
• Flagging cloud metadata endpoint access
• Detecting DNS rebinding exposure
• Identifying missing allowlist checks
• Performing HTTP taint analysis
• Generating per-framework fix snippets

Skill page

Source