OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

Zero-dependency webfetch MCP server for DeepSeek Harness and any MCP client: clean text / markdown / raw HTML / JSON, robots.txt compliance, chunked reading, SSRF protection. - withlovehub/dsh-webf...

Website monitoring backend with a REST API, PostgreSQL, RabbitMQ workers, Prometheus metrics, and Kubernetes manifests. - igor-zatochniy/site-checker

Self-hosted cloud security attack range using LocalStack, Terraform, Docker and AWS CLI to demonstrate IAM, S3, SSRF, metadata credential exposure, remediation and verification. - pavansai124/cloud...

Security vulnerability disclosure for ENS Metadata Service (SSRF & DoS) - Julik000/ens-metadata-security-disclosure

Self-hostable Threat Intelligence Platform: collects, enriches, scores and correlates IOCs, with STIX 2.1/MISP sharing and live alerting. Offline-first and SSRF-guarded. FastAPI, async SQLAlchemy, ...

AI Agent 安全测试工具 — 一键扫描 75+ 攻击向量，含 Prompt Injection / Tool Abuse / Data Exfiltration / SSRF / 中文场景 - simisdav55-oss/agent-audit

SSRF靶场，覆盖9大分类（基础SSRF、协议级SSRF、IP地址过滤绕过、URL解析器混淆、302重定向SSRF、DNS Rebinding、Blind SSRF、云元数据攻击、真是业务场景），真实业务场景覆盖12个真实的业务场景（webhook测试器、URL预览、图片代理/CDN、PDF生成器、API网关/代理、RSS阅读器、从URL导入文件、短链接展开器、健康检查监控、OAuth SS...

PoC Exploit for blind SSRF in XML-RPC Wordpress. Contribute to 4chech/CVE-2022-3590 development by creating an account on GitHub.

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Network scanner for BTCPay Server instances — version detection, security audit, and Lightning node discovery. - iktok90-design/btcpay-scanner

Technical SEO audit service built with Go and PostgreSQL, with concurrent crawling, robots.txt support, and SSRF protection. - igor-zatochniy/seo-auditor

Reference implementations of the patterns I rely on in production: Solana transaction sending and confirmation, SSRF-safe URL handling, and environment/secret loading. - cryptothud/engineering-patt...

Distributed webhook delivery service in Java 21 / Spring Boot 3. At-least-once delivery with a Redis reliable queue, jittered exponential-backoff retries, dead-letter queue, HMAC-SHA256 signing, an...

SSRF-guarded RFC 9421 keyid resolver (did:key / did:web / HTTPS) to Ed25519 public keys. Apache-2.0. - chopmob-cloud/algovoi-rfc9421-keyid

Defensive OWASP-style cheatsheet of common web application bug classes including SQLi, XSS, SSRF, XXE, IDOR, path traversal, deserialization, and command injection with mitigations. - fantasywastak...

Scanner: OWASP API Top 10 2023 + GraphQL security scanner — BOLA, BFLA, SSRF, introspection leaks, depth DoS in Python - ridhinva/api-security-scanner

picoclone CTF challenge: SSRF Safari (web · hard). Contribute to picoclone/ssrf-gateway development by creating an account on GitHub.

Zero-dependency SSRF-hardened fetch for Node: blocks private networks, cloud metadata, and DNS-rebinding redirects. 114 tests. - owner-stack/ssrf-safe-fetch