An http(s).Agent implementation that block request Private/Reserved IP addresses. Prevent SSRF. - azu/request-filtering-agent

SpringBootCMS 是一套面向内容管理场景的开箱即用型 Web 平台，专注于解决以下痛点： 🏢 政府/协会/企业官网搭建：内置多频道、动态表单、活动签到等业务模块，无需从零开发 🛡️ 安全合规要求：通过全系统安全审计（SQL 注入/XSS/CSRF/SSRF/RBAC 等 14 类风险全部加固） ⚡ 快速交付：前后台开箱即用、自带 SEO 优化、模板化页面配置、数据库 DDL + ...

PoC: 24 Vulns in WackoWiki — SSRF, Stored XSS, Deserialization, CSRF (CVSS 9.1) - Kimdir01/wackowiki-multi-vuln-cve

Transactional outbound webhooks for Node.js/TypeScript — enqueue inside your DB transaction and deliver reliably (signing, retries, DLQ, SSRF) on the PostgreSQL you already run. - Y1-Effy/CommitCou...

Prevent SSRF in Go: validate outbound URLs and block internal addresses at dial time (DNS-rebinding safe) - richardwooding/ssrfguard

The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets. - 0x...

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs crossed into a redirect-follo...

Contribute to D4rkadrian/ssrf-poc development by creating an account on GitHub.

PoC and Dockerized vulnerable lab for CVE-2021-40822 (SSRF in GeoServer) - phor3nsic/CVE-2021-40822

A comprehensive browser extension designed for authorized security testing and penetration testing activities. CyberInject provides quick access to common security payloads across multiple vulnerab...

HackTheBox Nimbus (Hard) writeup: SSRF -> IMDS -> SQS worker RCE -> floci/LocalStack admin -> privileged-container root path - bidnessnonya28/nimbus-htb-writeup

Website Compare — UAT vs Production content diff: sitemap coverage + deep section/heading/SEO diff, jump-to-live-text. Stateless FastAPI + React. BA/SA portfolio. - hellOoSaksit/PiKaOS-Standalone

SSRF-safe outbound HTTP — public-IP validation, DNS-rebind pinning and per-redirect re-checks. - jeffersongoncalves/laravel-ssrf-guard

Hybrid web security scanner with hosted passive analysis, a local Playwright runtime scanner, SSRF controls, and explainable scoring. - immanuelgn/TraceLattice

Read CalDAV (RFC 4791) calendars + CardDAV (RFC 6352) address books into a Solid pod as owner-private schema:Event + vcard:AddressBook — standard-protocol bridge over @jeswr/solid-task-model + SSRF...

A beautiful, skeumorphic web music player supporting local file uploads and direct URL playback. Features dynamic theme colors based on cover art, audio visualization, SSRF protection, and one-clic...

Contribute to soulless-sec/Omeka-s-Response-Disclosing-SSRF development by creating an account on GitHub.

Standalone DPoP-bound Solid-OIDC resource-server access-token verifier (RFC 6750/9068/9449) in Rust — issuer-agnostic, asymmetric-only, SSRF-safe WebID resolver. From the prod-solid-server Rust spi...

Production-shaped async medical document ingestion service — FastAPI + Celery + PostgreSQL + Redis, hexagonal architecture, at-least-once delivery with exponential backoff, API-key auth, structured...

Offensive web and API attack framework — fingerprinting, SSRF to cloud metadata, IDOR enumeration, JWT/OAuth attacks, SQL/NoSQL/SSTI injection, and GraphQL exploitation. - arkanzasfeziii/Sentinel