hunt-ssrf SKILL.md skillA
hunt-ssrf from galact-byte/galact-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add galact-byte/galact-skills/hunt-ssrf@git:20260806.712112cPins git:20260806.712112c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- galact-byte/galact-skills
- Path
skills/hunt-ssrf/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260806.712112c, committed Aug 6, 2026
- Size
- 5,633 bytes
- Repository stars
- 7
- License
- a license file GitHub does not identify
在授权渗透测试中系统性挖掘服务端请求伪造（SSRF）。当目标存在"服务端按用户可控的 URL/主机/地址发起出站请求"的功能——如 URL 预览、图片/视频抓取、Webhook、集成回调、导入远程资源、PDF/截图渲染、代理转发——需要判定是否可绕过 SSRF 防护访问内网/云元数据/受限服务时使用。适用目标类型 REST API / Web 应用。触发场景包括用户说"测下这个 URL 抓取有没有 SSRF""这个 webhook 能打内网吗""帮我挖 SSRF/内网探测""看看能不能读云元数据"。输出：带原始请求/响应证据的 finding 报告（含 killed 记录）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# hunt-ssrf · 服务端请求伪造猎杀 一个只解决 **SSRF 一类漏洞** 的挖掘 skill。把"哪里能让服务端替我发请求"变成一条可复现、有证据、可判真伪的猎杀流水线，而不是零散试 payload。 关键动作都走 `tools/` 下的脚本执行，模型负责决策与判读，**不直接乱发请求**——这样证据统一留存、过程可复现。具体 payload、绕过手法、检测特征与真实报告在 `reference.md`，按需读取（渐进式披露）。 ## Scope（授权范围） **先确认授权，再动手。** 未拿到明确 scope 前不发任何出站探测请求。 开工前必须落实： - 授权目标域名/IP 段（in-scope）与明确排除项（out-of-scope）。 - 是否允许触达云元数据、内网段、第三方回调地址。 - OAST/带外回连是否允许（用自己的 Burp Collaborator / interactsh / 自建监听）。 这些任一不清楚就停下问用户，不要"先打了再说"。SSRF 天然会打到内网与元数据，越权探测风险高。 ## Goal 判定目标的"服务端取 URL"功能是否可被诱导访问**攻击者不应触达的资源**（内网服务、`169.254.169.254` 云元数据、`localhost` 管理端口、受限协议），给出可复现的 PoC 与影响链，并留存原始请求/响应证据。 ## Workflow 四个阶段顺序执行：`scope-check → recon → hunt → validate → report`。每阶段做完看"终止条件"再进下一步。 ### 1. scope-check - **输入**：用户给的授权范围。 - **动作**：把 in-scope / out-of-scope / 是否允许元数据与 OAST 写进 `evidence/scope.txt`。 - **命令**：`bash tools/recon.sh <target> --scope-only`（仅记录 scope，不发请求）。 - **终止条件**：`evidence/scope.txt` 存在且授权明确。否则 KILL 整个任务。 ### 2. recon - **输入**：in-scope 目标。 - **动作**：枚举一切"吃 URL/主机/地址"的入口——表单字段、JSON 键、query 参数、Webhook 配置、导入功能、`url=`/`src=`/`callback=`/`image=`/`proxy=` 类参数、SSO/OAuth `redirect_uri`。 - **输出**：`recon/endpoints.json`（候选入口清单：URL、参数名、方法、可控点）。 …
Read the whole file at its exact version.
How to install
mdr add galact-byte/galact-skills/hunt-ssrf@sha256:ec09b292d4806a8dThe line at the top of this page pins the label git:20260806.712112c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_mmb5ieygrubklqys)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 6, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5633 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
galact-byte/galact-skills · 7 stars · license a license file GitHub does not identify · pushed 2026-10-12 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_mmb5ieygrubklqys GET https://markdownregistry.com/api/v1/resolve?ref=galact-byte/galact-skills/hunt-ssrf GET https://markdownregistry.com/api/v1/blob/ec09b292d4806a8d06cb309ee33eb7e69dcd9b545b90ca0f42410eeb92e9ffe4
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from galact-byte/galact-skills
Every file in galact-byte/galact-skills