Ssrf Hunter

Description

--- name: ssrf-hunter description: Active SSRF hunter for an ingested program. Consumes webvuln-surface injection points (ssrf_likely params + URL-accepting inputs) + optional auth-context, tests each candidate via Burp MCP using OOB callbacks (Collaborator), localhost probes, cloud metadata reachability, protocol handlers, and IP bypass techniques. Confirms SSRF to the §4c proof ceiling (OOB callback or reachability proof — never extract cloud credentials, never pivot to internal services). Ref

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-ssrf-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.