Description: SSRF chained into IAM credential theft via cloud metadata, bypassing a VPC-origin S3 bucket policy using a presigned URL relay. - piyush204/ssrf-imds-credential-theft

🛡️ Offline Rust security scanner for AI agent tools & MCP servers — MCP, Hermes Agent, CrewAI, LangChain/LangGraph, GPT Actions, Cursor Rules. Catches command injection, credential exfiltra...

Security advisory and proof-of-concept for a Server-Side Request Forgery (SSRF) vulnerability in Ultimate PDF. - 0xWKZER/Ultimate-PDF-SSRF

Static security audit for MCP (Model Context Protocol) client configs and server code: leaked tokens, unpinned npx/uvx servers, shell injection, path traversal, SSRF. - abhi12337/mcp-audit

Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI. - boy-373/utcp-lint

Bilingual (Hebrew/English) phishing-message checker with explainable verdicts, brand look-alike detection and SSRF-hardened link inspection. FastAPI + Next.js. - ophbra22/mobileshield

Red-team CLI that tests whether your AI agent can be prompted into stealing its own cloud instance-metadata (IMDS) credentials. - Iceman2050/agent-imds-selftheft-test

WebEye is an SSRF-isolated phishing defense & threat intelligence platform featuring a 4-engine risk scorer, Threat Relationship Graph, headless Chromium sandbox, .eml & attachment ...

Go library for outbound network safety (SSRF protection). No AI, no cloud, zero dependencies - shouni/netarmor

Editorial headless CMS and block page builder: collections, revisions, Kanban, SSRF-safe webhooks, scheduled publishing, secure headless API. Next.js 16, tRPC v11, Prisma 7, Better Auth. - ssrjkk/v...

Runtime-configurable mailer for Symfony on top of Instance Settings: DSN from the admin UI on every send, DSN and sender validation with an SSRF host guard, test e-mail, Resend key check, sent-mail...

Contribute to LeHuongg/cloud-metadata-ssrf development by creating an account on GitHub.

Deterministic, secure, fast HTML-to-PDF converter: one section per page, byte-identical output, file://+SSRF protection. Zero config. CLI + library. - Blvckpanda/Tympan

SSRF protection for Laravel's HTTP client: strict URL canonicalising, private and cloud-metadata address blocking, DNS pinning, re-vetted redirects and a validation rule. - roundly-consulti...

AI-powered web threat detection & digital trust intelligence: SSRF-safe URL/TLS/message analysis, evidence-grounded AI explanations, on-chain report integrity with independent verification ...

One URL’s readable text as a CLI and local MCP server — main content as markdown, plain text or the raw body. Built for agent runtimes that can search but cannot read a user-given URL: no cookies, ...

SSRF 真实业务靶场. Contribute to lang-sec/SSRF-labs development by creating an account on GitHub.

Локальная веб-лаборатория: 8 проверяемых сценариев SQLi, IDOR, XSS, SSRF, sessions, upload, CORS и debug exposure. - fant3k/vulnerable-notes-lab

URL and content safety rules for the HOP family as one Laravel package: destinations judged against keyword patterns, risky hosts, blacklists and threat feeds; an SSRF-safe UrlGuard that pins DNS; ...

Zero-dependency multi-SNS cross-posting SDK (X, Mastodon, Bluesky, Misskey, Threads) with DNS-rebinding-safe SSRF protection for federated instances and AES-256-GCM credential envelopes. - takao-de...