Test for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add mukul975/Anthropic-Cybersecurity-Skills/performing-ssrf-vulnerability-exploitationCompatible with
Supported agents
| name | performing-ssrf-vulnerability-exploitation |
| description | Test for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection. |
| domain | cybersecurity |
| subdomain | security-operations |
| tags | - performing - ssrf - vulnerability - exploitation |
| version | '1.0' |
| author | mahipal |
| license | Apache-2.0 |
| nist_csf | - DE.CM-01 - RS.MA-01 - GV.OV-01 - DE.AE-02 |
pip install requestshttp://169.254.169.254/latest/meta-data/http://127.0.0.1:port/, http://10.0.0.1/file:///etc/passwd, gopher://, dict://# For authorized penetration testing and lab environments only
python scripts/agent.py --target-url https://app.example.com/fetch?url= --output ssrf_report.json
GET /fetch?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
If the response contains AWS credentials (AccessKeyId, SecretAccessKey), SSRF is confirmed with critical impact.
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionperforming-ssrf-vulnerability-exploitationExecute the skills CLI command in your project's root directory to begin installation:
epx add mukul975/Anthropic-Cybersecurity-Skills/performing-ssrf-vulnerability-exploitationFetches performing-ssrf-vulnerability-exploitation from mukul975/Anthropic-Cybersecurity-Skills and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/performing-ssrf-vulnerability-exploitation
Restart Cursor to activate performing-ssrf-vulnerability-exploitation. Access via /performing-ssrf-vulnerability-exploitationin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
performing-mobile-device-forensics-with-cellebrite
mukul975/Anthropic-Cybersecurity-Skills · performing-mobile-device-forensics-with-cellebrite · same repo
scanning-docker-images-with-trivy
mukul975/Anthropic-Cybersecurity-Skills · scanning-docker-images-with-trivy · same repo
analyzing-network-traffic-for-incidents
mukul975/Anthropic-Cybersecurity-Skills · analyzing-network-traffic-for-incidents · same repo
triaging-vulnerabilities-with-ssvc-framework
mukul975/Anthropic-Cybersecurity-Skills · triaging-vulnerabilities-with-ssvc-framework · same repo
implementing-hardware-security-key-authentication
mukul975/Anthropic-Cybersecurity-Skills · implementing-hardware-security-key-authentication · same repo
analyzing-ransomware-payment-wallets
mukul975/Anthropic-Cybersecurity-Skills · analyzing-ransomware-payment-wallets · same repo
Solid pick for teams standardizing on skills: performing-ssrf-vulnerability-exploitation is focused, and the summary matches what you get after install.
We added performing-ssrf-vulnerability-exploitation from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
performing-ssrf-vulnerability-exploitation reduced setup friction for our internal harness; good balance of opinion and flexibility.
I recommend performing-ssrf-vulnerability-exploitation for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
Useful defaults in performing-ssrf-vulnerability-exploitation — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
Keeps context tight: performing-ssrf-vulnerability-exploitation is the kind of skill you can hand to a new teammate without a long onboarding doc.
Registry listing for performing-ssrf-vulnerability-exploitation matched our evaluation — installs cleanly and behaves as described in the markdown.
I recommend performing-ssrf-vulnerability-exploitation for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
Keeps context tight: performing-ssrf-vulnerability-exploitation is the kind of skill you can hand to a new teammate without a long onboarding doc.
Registry listing for performing-ssrf-vulnerability-exploitation matched our evaluation — installs cleanly and behaves as described in the markdown.
showing 1-10 of 36