Hardening a known vulnerable ssrf-ring utilizing AI. - skillkraftz/ssrf-ring-dojo

Contribute to thesnakedoctor/ssrf-sheriff-test development by creating an account on GitHub.

Test, exploit, and secure local RAG pipelines. A vulnerability sandbox demonstrating zero-click SSRF, token manipulation, and Regex WAF defenses. - SanjeevKrishna2470/RAGVulnerabilitySandbox

Contribute to Suriohxk/CNSPROJECT_SSRF-Scanner development by creating an account on GitHub.

Deliberately vulnerable multi-service Docker lab for security evaluation, focusing on SSRF, distributed replay, and Redis-backed auth state. Includes two admin replicas, token-service, and gateway ...

Find hardcoded secrets, command injection, SSRF, and policy violations in MCP server configs before they ship. Scanner + runtime gateway. - 0xRake/mcp-guard

Thinking about the ethical concerns with this requestThinking about the ethical concerns with this requestA Python tool that exploits a Server-Side Request Forgery (SSRF) vulnerability to perform i...

Black-box web security recon toolkit for AI-driven bug bounty. SSRF, XXE, OIDC, cloud metadata, JS analysis — all JSON output. - catbyte-security/webprobe

Discover 200+ CTF and bug bounty payloads with 8 categories for fast testing, research, and exploit development - cloudie-w/payload-kit

Curated gf patterns for bug bounty — XSS, SSRF, SQLi, LFI, RCE, IDOR, SSTI, redirects, and more - kdairatchi/gf-patterns

Contribute to Mireezzzz/ssrf_lab development by creating an account on GitHub.

Contribute to Shashwath800/ssrf development by creating an account on GitHub.

Contribute to roberttkach/ncapd development by creating an account on GitHub.

🛡 Advanced Web Vulnerability Scanner for Bug Bounty & Penetration Testing. 23 modules: XSS, SQLi, SSRF, Command Injection, JWT, CORS, Subdomain Takeover, GraphQL & more. Single file...

Professional-grade Etsy MCP server — 104 pure-primitive tools across 13 categories wrapping Etsy's Open API v3. Capability layer, not reasoning layer. Python 3.13 + uv workspace, full OAuth...

BlackBounty is a high-performance, automated reconnaissance and vulnerability scanning pipeline designed for large-scale bug hunting. It leverages a dynamic proxy-rotation system to bypass WAFs and...

Self-hosted Burp Collaborator alternative — DNS+HTTP+HTTPS+SMTP listeners, browser dashboard, cloud metadata detection, 46 SSRF payloads - Zeeshanafridai/SSRF-Callback-Server

A Server-Side Request Forgery (SSRF) vulnerability exists in the `/get_geo_ip` endpoint of DeepAI.org's API. The endpoint trusts the `X-Forwarded-For` header without validation, allowing an...

Recon + target prioritization tool for hackers focused on IDOR, SSRF, Open Redirects, and Business Logic flaws. - scythesec/scythefuzzer