ssrf-sheriff
Vulnerability simulator
A tool designed to test and simulate Server-Side Request Forgery (SSRF) vulnerabilities by generating responses with configurable secret tokens
A simple SSRF-testing sheriff written in Go
315 stars
15 watching
59 forks
Language: Go
last commit: 21 days ago
Linked from 1 awesome list
bugbountygossrf
Related projects:
Repository | Description | Stars |
---|---|---|
ksharinarayanan/ssrfire | An automated tool to discover potential Server-Side Request Forgery (SSRF) vulnerabilities in web applications by scanning the domain for open redirects and testing for cross-site scripting (XSS) | 944 |
wallarm/gotestwaf | A tool to assess and evaluate API security solutions by generating malicious requests and simulating attacks on web applications. | 1,557 |
jacobreynolds/ssrfdetector | A web application that detects and warns users about potential Server-side Request Forgery (SSRF) vulnerabilities. | 149 |
stevenaldinger/decker | An orchestration framework for automating penetration testing with declarative configuration files and plugin-based resource management | 288 |
randomrobbiebf/grafana-ssrf | A tool to demonstrate and exploit authenticated SSRF vulnerabilities in Grafana | 77 |
damian89/extended-ssrf-search | An SSRF scanner written in Python to identify potential vulnerabilities by scanning predefined settings in URLs and request headers. | 274 |
incredibleindishell/ssrf_vulnerable_lab | A laboratory repository demonstrating vulnerable PHP code examples for Server-Side Request Forgery (SSRF) attacks | 670 |
trycatchhcf/dumpsterfire | A toolset for creating and automating customized security events to simulate realistic scenarios for testing and training | 996 |
vcaesar/tt | A tool for writing and running tests in Go with colorful output and benchmarking capabilities. | 8 |
antonboom/testifylint | A tool that checks the usage of the testify testing framework in Go programs | 101 |
marvinjwendt/testza | A comprehensive testing framework for Go, providing features for assertions, fuzzing, output capture, and more. | 418 |
d4rckh/vaf | A tool designed to automate the process of testing web applications for vulnerabilities by generating and submitting random input to identify security weaknesses. | 312 |
twilight4/nobility | A pentesting framework with shell integrations designed to automate workflows and streamline productivity. | 3 |
bordercloud/tft | A tool to test and evaluate the performance of SPARQL services | 8 |
luontola/gospec | A testing framework for Go that allows writing self-documenting tests/specifications and executes them concurrently and safely isolated. | 113 |