ssrf-oob
forefy
Prove blind SSRF by injecting an out-of-band callback into URL params and forwarding headers, then watching for the hit. Use when testing for SSRF.
CodingClaude Code
144GitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “ssrf”
1–8 / 8
More filters
Results: 8
Malicious Pdf
jonaslejon
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applic…
Document ProcessingReview before use
4.1KGitHub
competition-cloud-metadata-path
zhaoxuya520
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for cloud metadata services, instance identity, workload identity, link-local credential pat…
ResearchClaude Code
33.7KGitHub
hunt-cache-poison
elementalsouls
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflect…
SecurityClaude Code
4.1KGitHub
hunt-cloud-misconfig
elementalsouls
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFron…
SecurityClaude Code
4.1KGitHub
cloud-iam-deep
elementalsouls
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration…
SecurityClaude Code
4.1KGitHub
Garud
R0X4R
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…
SecurityReview before use
809GitHub
api-security-auditor
Navinspire-ia
Audit the web/API attack surface - authn/authz on endpoints, CORS, CSRF, SSRF, security headers, rate limiting, mass assignment, and OWASP API Top 10. Use for /perimeter…
SecurityClaude Code
23GitHub
External platform skills
Browse external directory →Owner-curated external sources. Not filtered by the scores or compatibility controls above; excluded from GitHub rankings and automatic installation.
No external entries match this query.
Guides & comparisons
- AI agent skills library ↗
- Open source AI agent skills ↗
- Best Codex skills ↗
- Best AI agent skills for stock analysis ↗
- Best Codex skills for web scraping ↗
- Best Claude Code skills for PDF parsing ↗
- Best AI agent skills for football analytics ↗
- OpenAgentSkill vs skills.sh ↗
- OpenAgentSkill vs agentskills.io ↗