florianbuetow/appsec

v0.1.2MIT

Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.

GitHub

skills

ssrf

This skill should be used when the user asks to "check for SSRF", "analyze server-side request forgery", "find URL fetching vulnerabilities", "check for internal network access", or mentions "SSRF", "URL fetching", "cloud metadata", "169.254.169.254", or "request forgery" in a security context. Maps to OWASP Top 10 2021 A10: Server-Side Request Forgery.

Read SKILL.md at the source

Pinned to revision 8dd1fdc0bd68, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/ssrf/SKILL.md
skills/ssrf/references/detection-patterns.md

Every link opens the file at its source, pinned to the revision this page describes.