Description: SSRF chained into IAM credential theft via cloud metadata, bypassing a VPC-origin S3 bucket policy using a presigned URL relay. - piyush204/ssrf-imds-credential-theft

SSRF in OpenAI Codex sandbox proxy (codex-rs/network-proxy) via RFC 6052 NAT64 Well-Known Prefix 64:ff9b::/96 — full write-up, PoC, fix, end-to-end differential evidence - BOSSMANIWAY/codex-nat64

🛡️ Offline Rust security scanner for AI agent tools & MCP servers — MCP, Hermes Agent, CrewAI, LangChain/LangGraph, GPT Actions, Cursor Rules. Catches command injection, credential exfiltra...

Security advisory and proof-of-concept for a Server-Side Request Forgery (SSRF) vulnerability in Ultimate PDF. - 0xWKZER/Ultimate-PDF-SSRF

Static security audit for MCP (Model Context Protocol) client configs and server code: leaked tokens, unpinned npx/uvx servers, shell injection, path traversal, SSRF. - abhi12337/mcp-audit

Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI. - boy-373/utcp-lint

CVE-2025-29927: Next.js middleware authorization bypass. Lab-only PoC, Sigma detection, remediation. Authorized testing only. - dexteon/nextjs-middleware-auth-bypass-cve-2025-29927

Bilingual (Hebrew/English) phishing-message checker with explainable verdicts, brand look-alike detection and SSRF-hardened link inspection. FastAPI + Next.js. - ophbra22/mobileshield

CI-ready verifier for deployed MCP servers' SBOMs against the Oct 2026 MCP CVE cluster (Langflow 9.9, fetch-server SSRF, x64dbg 9.3, SDK OAuth theft). Manifest + CycloneDX input, exit 2 on ...

Red-team CLI that tests whether your AI agent can be prompted into stealing its own cloud instance-metadata (IMDS) credentials. - Iceman2050/agent-imds-selftheft-test

WebEye is an SSRF-isolated phishing defense & threat intelligence platform featuring a 4-engine risk scorer, Threat Relationship Graph, headless Chromium sandbox, .eml & attachment ...

Go library for outbound network safety (SSRF protection). No AI, no cloud, zero dependencies - shouni/netarmor

Editorial headless CMS and block page builder: collections, revisions, Kanban, SSRF-safe webhooks, scheduled publishing, secure headless API. Next.js 16, tRPC v11, Prisma 7, Better Auth. - ssrjkk/v...

Runtime-configurable mailer for Symfony on top of Instance Settings: DSN from the admin UI on every send, DSN and sender validation with an SSRF host guard, test e-mail, Resend key check, sent-mail...

Contribute to LeHuongg/cloud-metadata-ssrf development by creating an account on GitHub.

ZCode plugin: audit a web project for security threats and fix them (headers, TLS, secrets, CVE deps, XSS/CSRF/SQLi/SSRF) with dependency-free Node scanners. - Artemik0922/websec-audit

Offline educational model of CVE-2026-64849 (MLflow webhook DNS-rebinding SSRF TOCTOU) - federiconbaez/cortex9-mlflow-webhook-dns-rebinding-toctou-model

Offline educational model of CVE-2026-108360 (PhpSpreadsheet redirect whitelist SSRF) - federiconbaez/cortex9-phpspreadsheet-redirect-whitelist-ssrf-model

CVE-2017-9506 - SSRF. Contribute to random-robbie/Jira-Scan development by creating an account on GitHub.

Contribute to SaiTeja-Erukude/CVE-2026-56712-cog-ssrf development by creating an account on GitHub.