SSRF Vulnerability Checker
Test URLs for Server-Side Request Forgery using payload techniques targeting internal metadata services and localhost endpoints.
SSRF Testing Methodology
Server-Side Request Forgery (SSRF) allows an attacker to make requests from the server to internal or restricted resources. This checker tests for SSRF by injecting payloads targeting cloud metadata services (169.254.169.254), internal hosts (localhost, 127.0.0.1), and internal services. Always test only with explicit authorization.