← All tools

SSRFmap

https://github.com/swisskyrepo/SSRFmap

Open Source

Categories

Web Application

Description

Automatic SSRF (Server-Side Request Forgery) fuzzer and exploitation tool. Tests for SSRF vulnerabilities and exploits them to reach internal services like AWS metadata, Redis, Memcached, and more.

Keywords

SSRF server-side request forgery exploitation AWS metadata internal services fuzzing

Example Usage

python3 ssrfmap.py -r request.txt -p url -m readfiles
python3 ssrfmap.py -r request.txt -p url -m aws

See also

Pentest-Swarm-AI

Open Source

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, explo…

ffuf

Open Source Kali

Fast web fuzzer written in Go. Supports directory discovery, parameter fuzzing, virtual host discove…

Burp Suite

Freemium Kali

Leading platform for web application security testing. The Community Edition includes an interceptin…

NoSQLMap

Open Source

Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…

Interactsh

Open Source

Out-of-band interaction gathering server. Generates unique collaboration URLs for detecting blind vu…

UltimateCMSWordlists

Open Source

📚 An ultimate collection wordlists of the best-known CMS…