Kennyalfredo

Hunt Ssrf — Development skill for Claude Code

Development community

Active SSRF hunt for an ingested program.

How to install Hunt Ssrf

Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-ssrf.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-ssrf.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-ssrf.md

Restart Claude Code, or start a new session, for it to be picked up.

What Hunt Ssrf does

description: Active SSRF hunt for an ingested program. Consumes webvuln-surface seeds (ssrf_likely params + URL-accepting inputs) + optional auth-context, tests each injection point via Burp using OOB callbacks (Collaborator), localhost probes, cloud metadata reachability, protocol handlers, and IP bypass techniques. Confirms to the proof ceiling (OOB callback or reachability proof — never extract cloud credentials, never pivot to internal services). Writes redacted candidates; does not veri

Alternatives in Development

Oob — Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th 4.5k ★
Resolve Drizzle Migrations — Resolve Drizzle migration conflicts by accepting upstream and regenerating local migrations 2.5k ★
Phase 2 Execution Plan — Phase 2 Execution Plan: Consumes/Produces Pattern (22 Skills) 183 ★