Open-source alternatives to Surf

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats (WebRTC).

DNS Rebinding Exploitation Framework

Server-side request forgery detector

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

DNS rebinding toolkit

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

Authenticated SSRF in Grafana

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Automatic SSRF fuzzer and exploitation tool

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Simple DNS Rebinding Service

A simple SSRF-testing sheriff written in Go

Tool to searching sentry config on page or in javascript files and check blind SSRF

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

Automatic tool for DNS rebinding-based SSRF attacks

Smart ssrf scanner using different methods like parameter brute forcing in post and get...