ssrf-sheriff

Vulnerability simulator

A tool designed to test and simulate Server-Side Request Forgery (SSRF) vulnerabilities by generating responses with configurable secret tokens

A simple SSRF-testing sheriff written in Go

GitHub

320 stars
15 watching
62 forks
Language: Go
last commit: 3 months ago
Linked from 1 awesome list

bugbountygossrf

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
ksharinarayanan/ssrfire An automated tool to discover potential Server-Side Request Forgery (SSRF) vulnerabilities in web applications by scanning the domain for open redirects and testing for cross-site scripting (XSS) 953
wallarm/gotestwaf A tool to assess and evaluate API security solutions by generating malicious requests and simulating attacks on web applications. 1,578
jacobreynolds/ssrfdetector A web application that detects and warns users about potential Server-side Request Forgery (SSRF) vulnerabilities. 150
stevenaldinger/decker An orchestration framework for automating penetration testing with declarative configuration files and plugin-based resource management 291
randomrobbiebf/grafana-ssrf A tool to demonstrate and exploit authenticated SSRF vulnerabilities in Grafana 78
damian89/extended-ssrf-search An SSRF scanner written in Python to identify potential vulnerabilities by scanning predefined settings in URLs and request headers. 276
incredibleindishell/ssrf_vulnerable_lab A laboratory repository demonstrating vulnerable PHP code examples for Server-Side Request Forgery (SSRF) attacks 679
trycatchhcf/dumpsterfire A toolset for creating and automating customized security events to simulate realistic scenarios for testing and training 998
vcaesar/tt A tool for writing and running tests in Go with colorful output and benchmarking capabilities. 8
antonboom/testifylint A tool that checks the usage of the testify testing framework in Go programs 105
marvinjwendt/testza A comprehensive testing framework for Go, providing features for assertions, fuzzing, output capture, and more. 419
d4rckh/vaf A tool designed to automate the process of testing web applications for vulnerabilities by generating and submitting random input to identify security weaknesses. 314
twilight4/nobility A pentesting framework with shell integrations designed to automate workflows and streamline productivity. 3
bordercloud/tft A tool to test and evaluate the performance of SPARQL services 8
luontola/gospec A testing framework for Go that allows writing self-documenting tests/specifications and executes them concurrently and safely isolated. 113