XXRF Shots – Useful For Testing SSRF Vulnerability

XXRF Shots is useful for testing SSRF vulnerability. Server Side Request Forgery  or SSRF is a type of vulnerability class where attacker sends crafted request from a vulnerable web application, including the unauthorised access to the internal resources behind the firewall which are inaccessible directly from the external network.

XXRF Shots Installation

git clone https://github.com/ariya/phantomjs.gitcd phantomjs
chmod +x build.py
./build.py

Also ReadClrinject – Injects C# EXE or DLL Assembly Into every CLR Runtime and AppDomain Of Another Process

Usage

./xxrf.sh

Enter the url with vulnerable parameter and hit return key. The script is designed to perform two different tasks. At first it will inject the payload next to the vulnerable parameter and process the request to another python script written by @maaaaz. The python script requires phantomJS to perform screenshot function.

Youtube