An SSRF-Tool wrote in golang
Features
Wordlist Creation
Inject in every parameter one by one
Very fast speed
Inject into paths
Silent Mode
Fetch endpoints from Javascript files
Bruteforce parameters
Find SSRF in those parameters
Match multiple patterns in the response
Fetch endpoints from Javascript files
Bruteforce parameters
Find SSRF in those parameters
Match multiple patterns in the response
Note
Make sure when creating wordlists or finding ssrf with my tool that the domains are resolved. You can use:
httpx
httprobe
massdns
[hide][Hidden Content]]