ssrf-sheriff

Vulnerability simulator

A tool designed to test and simulate Server-Side Request Forgery (SSRF) vulnerabilities by generating responses with configurable secret tokens

A simple SSRF-testing sheriff written in Go

GitHub

315 stars
15 watching
59 forks
Language: Go
last commit: 21 days ago
Linked from 1 awesome list

bugbountygossrf

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
ksharinarayanan/ssrfire An automated tool to discover potential Server-Side Request Forgery (SSRF) vulnerabilities in web applications by scanning the domain for open redirects and testing for cross-site scripting (XSS) 944
wallarm/gotestwaf A tool to assess and evaluate API security solutions by generating malicious requests and simulating attacks on web applications. 1,557
jacobreynolds/ssrfdetector A web application that detects and warns users about potential Server-side Request Forgery (SSRF) vulnerabilities. 149
stevenaldinger/decker An orchestration framework for automating penetration testing with declarative configuration files and plugin-based resource management 288
randomrobbiebf/grafana-ssrf A tool to demonstrate and exploit authenticated SSRF vulnerabilities in Grafana 77
damian89/extended-ssrf-search An SSRF scanner written in Python to identify potential vulnerabilities by scanning predefined settings in URLs and request headers. 274
incredibleindishell/ssrf_vulnerable_lab A laboratory repository demonstrating vulnerable PHP code examples for Server-Side Request Forgery (SSRF) attacks 670
trycatchhcf/dumpsterfire A toolset for creating and automating customized security events to simulate realistic scenarios for testing and training 996
vcaesar/tt A tool for writing and running tests in Go with colorful output and benchmarking capabilities. 8
antonboom/testifylint A tool that checks the usage of the testify testing framework in Go programs 101
marvinjwendt/testza A comprehensive testing framework for Go, providing features for assertions, fuzzing, output capture, and more. 418
d4rckh/vaf A tool designed to automate the process of testing web applications for vulnerabilities by generating and submitting random input to identify security weaknesses. 312
twilight4/nobility A pentesting framework with shell integrations designed to automate workflows and streamline productivity. 3
bordercloud/tft A tool to test and evaluate the performance of SPARQL services 8
luontola/gospec A testing framework for Go that allows writing self-documenting tests/specifications and executes them concurrently and safely isolated. 113