random-robbie / ssrf-finder

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ssrf-finder

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

cat urls.txt | ./ssrf-finder

or

echo https://www.someting.com/?url=FUZZ&whatever=adsa&id=1  | ./ssrf-finder

if it generates a ssrf.log file then you have some SSRF's if not no SSRF.

URLs must look like.

http://www.something.com/url?=FUZZ&somethingelse=whatever

99% of this code is from @tomnomnom the hero!

raise issues if you have questions!

Use a VPS from DO

DigitalOcean Referral Badge

About

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.


Languages

Language:Go 100.0%