Zero-dependency webfetch MCP server for DeepSeek Harness and any MCP client: clean text / markdown / raw HTML / JSON, robots.txt compliance, chunked reading, SSRF protection. - withlovehub/dsh-webf...

Website monitoring backend with a REST API, PostgreSQL, RabbitMQ workers, Prometheus metrics, and Kubernetes manifests. - igor-zatochniy/site-checker

Self-hosted cloud security attack range using LocalStack, Terraform, Docker and AWS CLI to demonstrate IAM, S3, SSRF, metadata credential exposure, remediation and verification. - pavansai124/cloud...

Security vulnerability disclosure for ENS Metadata Service (SSRF & DoS) - Julik000/ens-metadata-security-disclosure

Self-hostable Threat Intelligence Platform: collects, enriches, scores and correlates IOCs, with STIX 2.1/MISP sharing and live alerting. Offline-first and SSRF-guarded. FastAPI, async SQLAlchemy, ...

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Technical SEO audit service built with Go and PostgreSQL, with concurrent crawling, robots.txt support, and SSRF protection. - igor-zatochniy/seo-auditor

Reference implementations of the patterns I rely on in production: Solana transaction sending and confirmation, SSRF-safe URL handling, and environment/secret loading. - cryptothud/engineering-patt...

Distributed webhook delivery service in Java 21 / Spring Boot 3. At-least-once delivery with a Redis reliable queue, jittered exponential-backoff retries, dead-letter queue, HMAC-SHA256 signing, an...

SSRF-guarded RFC 9421 keyid resolver (did:key / did:web / HTTPS) to Ed25519 public keys. Apache-2.0. - chopmob-cloud/algovoi-rfc9421-keyid

Defensive OWASP-style cheatsheet of common web application bug classes including SQLi, XSS, SSRF, XXE, IDOR, path traversal, deserialization, and command injection with mitigations. - fantasywastak...

picoclone CTF challenge: SSRF Safari (web · hard). Contribute to picoclone/ssrf-gateway development by creating an account on GitHub.

Zero-dependency SSRF-hardened fetch for Node: blocks private networks, cloud metadata, and DNS-rebinding redirects. 114 tests. - owner-stack/ssrf-safe-fetch

Self-hosted browser-backed web_search and web_fetch for Codex, Claude Code, OpenCode, Pi, OpenClaw, HermesAgent, LangChain, and custom Agents — MCP + REST with provider fallback and SSRF protection...

Safe web monitoring and change intelligence with evidence, review workflows, and SSRF protection. - zixuanxu-dev/crawlscope

A codeplug generator which sources data from ssrf-lite and generates importable files for various CPS software (neonplug, qdmr, dmrconfig, etc.) - Chicago-Offline/codeplugger

Dependency-free Python library and CLI for structured Turkish news extraction with JSON-LD/semantic HTML parsing and SSRF-aware fetching. - okturan/news-extractor

A practical SSRF security lab featuring real-world bypass techniques, cloud metadata simulation, DNS rebinding, and secure SSRF defenses. - usfa7med/ssrf-lab

CVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST) - abdugafforov-bobur/CVE-2026-67620-poc