hub / github.com/ethicalhackingplayground/ssrf-king
github.com/ethicalhackingplayground/ssrf-king @v1.12
Chat with this repo
329 symbols
422 edges
42 files
305 documented · 93%
● updated 5y agov1.12 · 2021-01-13★ 6333 open issues
Browse by type
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
🔥 ssrf-king 🔥
v1.1 Latest
SSRF plugin for burp that Automates SSRF Detection in all of the Request
If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in the form
Upcoming Features Checklist
- It will soon have a user Interface to specifiy your own call back payload
- It will soon be able to test Json & XML
Features
- ✔️ Test all of the request for any external interactions.
- ✔️ Checks to see if any interactions are not the users IP if it is, it's an open redirect.
- ✔️ Alerts the user for any external interactions with information such as:
- Endpoint Vulnerable
- Host
- Location Found
Scanning Options
- ✔️ Supports Both Passive & Active Scanning.
Dependencies
Works only with * JDK 11 * Burp Professional
Tested with Burp Professional v2020.11.2
Process to Use it.
- Load the website you want to test.
- Add it as an inscope host in burp.
- Load the plugin.
- Keep note of the Burp Collab Payload.
- Passively crawl the page, ssrf-king test everything in the request on the fly.
- When it finds a vulnerabilitiy it logs the information and adds an alert.
From here onwards you would fuzz the parameter to test for SSRF.
If you get a bounty please support by buying me a coffee
Extension points exported contracts — how you extend this code
ITab (Interface)
This interface is used to provide Burp with details of a custom tab that will be added to Burp's UI, using a method such [2 …
Plugin/src/burp/ITab.java
IScannerCheck (Interface)
Extensions can implement this interface and then call IBurpExtenderCallbacks.registerScannerCheck() to regi [2 implementers]
Plugin/src/burp/IScannerCheck.java
IBurpExtender (Interface)
All extensions must implement this interface. Implementations must be called BurpExtender, in the package burp, must be [2 …
Plugin/src/burp/IBurpExtender.java
IScanIssue (Interface)
This interface is used to retrieve details of Scanner issues. Extensions can obtain details of issues by registering an [2 …
Plugin/src/burp/IScanIssue.java
IExtensionStateListener (Interface)
Extensions can implement this interface and then call IBurpExtenderCallbacks.registerExtensionStateListener()</cod [2 …
Plugin/src/burp/IExtensionStateListener.java
browse all types & interfaces →
Core symbols most depended-on inside this repo
addScanIssue
called by 16
Plugin/src/burp/IBurpExtenderCallbacks.java
makeHttpRequest
called by 9
Plugin/src/burp/IBurpExtenderCallbacks.java
analyzeRequest
called by 8
Plugin/src/burp/IExtensionHelpers.java
fetchAllCollaboratorInteractions
called by 8
Plugin/src/burp/IBurpCollaboratorClientContext.java
buildHttpMessage
called by 7
Plugin/src/burp/IExtensionHelpers.java
RunTestOnParameters
called by 2
Plugin/src/burp/BurpExtender.java
Shape
Languages
Java100%
Modules by API surface
Plugin/src/burp/IBurpExtenderCallbacks.java90 symbols
Plugin/src/burp/BurpExtender.java35 symbols
Plugin/src/burp/IExtensionHelpers.java22 symbols
Plugin/src/burp/IScanIssue.java12 symbols
Plugin/src/burp/IHttpRequestResponse.java11 symbols
Plugin/src/burp/ITextEditor.java9 symbols
Plugin/src/burp/IScanQueueItem.java8 symbols
Plugin/src/burp/IParameter.java8 symbols
Plugin/src/burp/IMessageEditorTab.java8 symbols
Plugin/src/burp/IResponseInfo.java7 symbols
Plugin/src/burp/IRequestInfo.java7 symbols
Plugin/src/burp/IMessageEditor.java7 symbols
For agents
$ claude mcp add ssrf-king \
-- python -m otcore.mcp_server <graph>