awesome-repositories.com
博客
MCP
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目MCP 服务器关于排名机制媒体报道
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

3 个仓库

Awesome GitHub RepositoriesServer-Side Request Forgery Techniques

Methods for forcing servers to make unauthorized requests, including blind exploitation and protocol-specific bypasses.

Explore 3 awesome GitHub repositories matching security & cryptography · Server-Side Request Forgery Techniques. Refine with filters or upvote what's useful.

Awesome Server-Side Request Forgery Techniques GitHub Repositories

用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
  • swisskyrepo/payloadsallthethingsswisskyrepo 的头像

    swisskyrepo/PayloadsAllTheThings

    78,434在 GitHub 上查看↗

    This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

    Explains how to leverage specific URL protocols to access local files or internal services via server-side request forgery.

    Pythonbountybugbountybypass
    在 GitHub 上查看↗78,434
  • fuzzdb-project/fuzzdbfuzzdb-project 的头像

    fuzzdb-project/fuzzdb

    8,819在 GitHub 上查看↗

    fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s

    Provides common URL patterns to test if an application improperly redirects users to untrusted external destinations.

    PHP
    在 GitHub 上查看↗8,819
  • daffainfo/allaboutbugbountydaffainfo 的头像

    daffainfo/AllAboutBugBounty

    6,644在 GitHub 上查看↗

    AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co

    Provides techniques for obfuscating internal hostnames and IP addresses to evade SSRF filters.

    bugbugbountybugbountytips
    在 GitHub 上查看↗6,644
  1. Home
  2. Security & Cryptography
  3. Vulnerability Assessment and Testing
  4. Security Testing and Auditing
  5. Security Vulnerabilities
  6. Server-Side Request Forgery Techniques

探索子标签

  • Blind SSRF ExploitationExploitation techniques for server-side request forgery where the attacker receives no direct response from the target.
  • Filter Bypass TechniquesMethods used to circumvent security controls that restrict server-side requests to unauthorized internal or external resources.
  • Open URL Redirect PayloadsInput strings used to manipulate application redirects, potentially leading to unauthorized access or information disclosure.
  • URL Scheme ExploitsExploits that leverage specific URL protocols to access local files or internal services via server-side requests.