Summary
服务端请求伪造(SSRF)的检测与利用方法论。当目标有 URL 获取/预览/导入功能、PDF 生成、Webhook、远程图片加载、RSS 导入时使用。包含 IP 过滤绕过大全、协议利用(file/gopher/dict)、云元数据窃取、内网服务探测。即使参数名看起来无害（如…
wgpsec/aboutsecurity
ssrf-methodology
服务端请求伪造(SSRF)的检测与利用方法论。当目标有 URL 获取/预览/导入功能、PDF 生成、Webhook、远程图片加载、RSS 导入时使用。包含 IP 过滤绕过大全、协议利用(file/gopher/dict)、云元数据窃取、内网服务探测。即使参数名看起来无害（如…
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
azure-ai
Same topic
microsoft/azure-skills
Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybr…
568.2K installs
azure-rbac
Same topic
microsoft/azure-skills
489K installs
pptx
Same topic
anthropics/skills
Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or bot…
216.8K installs
pdf
Same topic
anthropics/skills
Use this skill whenever the user wants to do anything with PDF files. This includes reading or …
192.4K installs
docx
Same topic
anthropics/skills
Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.do…
184.5K installs
xlsx
Same topic
anthropics/skills
Use this skill any time a spreadsheet file is the primary input or output. This means any task …
165K installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 16 installs