2 addedskillsworks in chat
a look at what’s possible
confirm scope before any test
reviews the target's stated scope and asks for written approval of each callback domain before any request is sent.
illustrative preview
validate with your own callback
checks whether a url parameter fetches a user-controlled callback server, then stops and reports the result without probing internal addresses.
illustrative previewScope-first SSRF review and safe validation using user-controlled callbacks, with explicit limits against internal data access or pivoting.
what it'll do
manual ssrf hunting
only when asked
open in Folk
already have an account? log in
free to add. it works free for 7 days, then needs pro.
built by a folk user. eligible creators earn when people use their skills. how creators earn