Kennyalfredo

Ssrf Hunter — Development agent for Claude Code

Development community

Active SSRF hunter for an ingested program.

How to install Ssrf Hunter

Installs to ~/.claude/agents/kennyalfredo-pr-agent-ssrf-hunter.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/ssrf-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-ssrf-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Ssrf Hunter does

name: ssrf-hunter description: Active SSRF hunter for an ingested program. Consumes webvuln-surface injection points (ssrf_likely params + URL-accepting inputs) + optional auth-context, tests each candidate via Burp MCP using OOB callbacks (Collaborator), localhost probes, cloud metadata reachability, protocol handlers, and IP bypass techniques. Confirms SSRF to the §4c proof ceiling (OOB callback or reachability proof — never extract cloud credentials, never pivot to internal services). Ref

Alternatives in Development

  • Correlator — Finding correlation engine 812 ★
  • Acx Implementer — AgentCortex /implement phase executor 145 ★
  • Evasion — Antivirus and EDR evasion specialist for authorized red team engagements 72 ★

Full documentation available on GitHub

View Source Repository

Related Agents

XSS Hunter — Development agent for Claude Code

XSS Hunter

Active XSS hunter for an ingested program. Consumes webvuln-surface injection points (reflected params + DOM s

Development community
Access Control Hunter — Development agent for Claude Code

Access Control Hunter

Active IDOR / BOLA / BFLA / mass-assignment hunter for an ingested program. Consumes webvuln-surface injection

Development community
Rapidwright Analyst — Development agent for Claude Code

Rapidwright Analyst

Predict likely timing and routability bottlenecks from supported Vivado DCPs using optional RapidWright experi

Development community
API Contract Guardian — Development agent for Claude Code

API Contract Guardian

Use this agent to detect breaking API changes in a diff — removed fields, renamed fields, changed types, narro

Development community
Rails Reviewer — Development agent for Claude Code

Rails Reviewer

Reviews changed Rails code for dangerous callbacks, logic in controllers, fat models, ActiveRecord misuse and

Development community
Chain Builder — Development agent for Claude Code

Chain Builder

Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Kno

Development community

Related Skills

Hunt Ssrf — Development skill for Claude Code

Hunt Ssrf

Active SSRF hunt for an ingested program. Consumes webvuln-surface seeds (ssrf_likely params + URL-accepting i

Development community
Oob — Development skill for Claude Code

Oob

Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th

Development community
Vibesec — Data skill for Claude Code

Vibesec

Helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and wea

Data community