swisskyrepo/SSRFmap

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3608 stars · 569 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

SSRFmap is a Python CLI framework that automatically detects and exploits Server-Side Request Forgery vulnerabilities. It takes a Burp Suite request file and a target parameter, then runs modules for file reading, port scanning, cloud metadata access, DNS zone transfers, and reverse shells.

Use cases

• detect SSRF vulnerabilities in web request parameters
• exploit SSRF to read local files on a server
• scan internal network ports via SSRF
• access cloud instance metadata endpoints through SSRF
• perform DNS zone transfer attacks through SSRF
• get a reverse shell via SSRF during a pentest
• practice SSRF exploitation in CTF challenges

When to choose

• you need automated SSRF fuzzing and exploitation from a captured HTTP request
• you want a modular tool with ready-made SSRF attack modules
• you're doing a pentest or CTF involving server-side request forgery

When to avoid

• you need general web vulnerability scanning beyond SSRF
• you want a GUI-based scanner rather than a CLI
• you're testing systems you don't have authorization to test

Facets

cli-tool · maturity active

penetration-testing security http-client cli security penetration-testing developer-tools windows python cli ssrf server-side-request-forgery fuzzer exploitation pentest ctf burp-suite linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="swisskyrepo/SSRFmap")