Ssrf Internal Network

Community

zhaji2333

ssrf-internal-network

当发现URL参数可控的抓取/代理/转发/爬虫/文档预览/图片预览/二维码/短链/Webhook/回调/在线解压等功能时调用。负责SSRF探测、云元数据利用、内网资产发现、DNS重绑定、协议绕过（file/gopher/dict）、Redis等内网服务攻击。

Overview

Publisher	zhaji2333
Repository	`CkSKILLS`
Skill name	`ssrf-internal-network`
Stars	123
Forks	16
Bundled files	Instructions only
License	MIT
Links	Skill source Repository

Markdown instructions
A SKILL.md file the model loads on demand, so it only costs tokens when a request actually matches.
Works with any LLM
AI skills are plain Markdown, not provider-specific code, so this works with GPT, Claude, Gemini, Grok, or a local model.
Self-contained
Everything the model needs lives in the instructions — no extra files to sync.
Open source
Published by zhaji2333 on GitHub. Read the source before you install it.

Installation

Install the Ssrf Internal Network AI skill in TypingMind to use it with any LLM, or drop it into another agent that reads SKILL.md.

Install in TypingMind

TypingMind installs a skill straight from its GitHub folder — it reads SKILL.md, bundles the resource files, and stores the result locally.

Open the app and go to Plugins → Skills.
Choose "Install from GitHub".
Paste the skill folder URL below and confirm.
https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/ssrf-internal-network
Enable the skill in any chat where you want it available.

Plugins → Skills → Add skill → From GitHub URL, then paste the folder URL and press Continue.

Install in another agent

Any agent that reads the Agent Skills format can use this skill — copy the folder into that agent's skills directory.

Claude Code — .claude/skills

git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git /tmp/CkSKILLS
mkdir -p .claude/skills
cp -r /tmp/CkSKILLS/.agents/skills/ssrf-internal-network .claude/skills/ssrf-internal-network

Restart Claude Code after copying so it picks up the new skill.

Use it in TypingMind

Enable Ssrf Internal Network in any TypingMind chat and the model takes it from there. Its name and description sit in the system prompt, and the moment a request matches, the model loads the full instructions itself — you never invoke it by hand, and it costs no tokens until it is actually used.

The model loads Ssrf Internal Network on its own as soon as a request matches it.

Works with any AI model

AI skills are plain Markdown instructions rather than provider-specific code, so Ssrf Internal Network is not tied to the model it was written for. Install it once in TypingMind and use it with GPT-5, Claude, Gemini, Grok, DeepSeek, Mistral, Llama, or a local model you run yourself — all on your own API keys.

Loaded only when it is needed
The system prompt carries just the name and description. The instructions are fetched on the first matching request, so an idle skill costs nothing.
Switch models mid-chat
Because the skill is instructions rather than code, changing model does not break it — the next model reads the same SKILL.md.

Skill instructions

This is the SKILL.md content the model loads. Read it before installing — a skill is instructions your model will follow.

ssrf-internal-network — SSRF 与内网横向专项深度挖掘

何时调用（触发条件）

请求中存在 URL 参数（url、link、img、redirect、callback、webhook、notify_url）
服务端抓取/代理/转发功能（爬虫、采集、预览、转码）
回调类功能（支付回调、Webhook 配置、回调验证）
二维码/短链生成、在线解压（远程 URL）
图片/文档/音视频在线预览

一、SSRF 场景清单

场景	漏洞类型	挖掘要点
二维码生成	SSRF/XSS/钓鱼	URL参数可控、二维码内容可控
短链服务	重定向/SSRF/遍历	短链可预测、目标URL可控
代理/转发服务	SSRF/内网穿透	目标地址可控、协议可控
爬虫/采集功能	SSRF/RCE	采集URL可控、解析引擎漏洞
在线预览(文档/代码)	SSRF/XSS/RCE	远程URL加载、渲染引擎漏洞
模板/报表生成	SSTI/任意文件读取	用户输入进入模板引擎
Webhook/回调配置	SSRF/信息泄露	回调URL可控、内网探测
文件预览（PDF/Office）	SSRF/XXE/RCE	远程URL加载、OLE对象
图片处理	SSRF	url:协议（ImageMagick）
视频/音频处理	SSRF/文件读取	concat协议、HLS playlist（FFmpeg）

二、云元数据（打内网核心）


AWS:     http://169.254.169.254/latest/meta-data/
阿里云:  http://100.100.100.200/latest/meta-data/
腾讯云:  http://metadata.tencentyun.com/latest/meta-data/

目标：获取临时凭证（IAM Role）、实例元数据、网络配置，进一步接管云资产。

三、内网探测思路

先验证可控性：请求外网可控地址（Burp Collaborator / DNSLog / 自己的 VPS）确认请求发出
内网网段探测：扫描 127.0.0.1、10.x、172.16-31.x、192.168.x 常见端口
Redis 未授权：gopher:// 写入 crontab/SSH key/主从复制 RCE
管理面板：内网 Jenkins/ES/Grafana/MySQL 等

协议利用：


file:///etc/passwd
gopher://127.0.0.1:6379/_<redis命令>
dict://127.0.0.1:6379/info

DNS 重绑定：注册域名解析到 127.0.0.1/内网 IP，绕过 IP 校验
重定向绕过：302 跳转至内网/云元数据，绕过 URL 白名单

四、绕过技术

IP 混淆：十进制/十六进制/八进制（2130706433、0x7f000001、0177.0.0.1）
短域名/URL 解析差异（http://127.0.0.1@evil.com）
重定向（http://evil.com/redirect?to=169.254.169.254）
DNS 重绑定
编码（双重 URL 编码、Unicode）
协议差异（代理与后端解析不一致）

五、验证要点

先证明出网（DNSLog 外带），再证明内网可达
云元数据：能读取即为严重（临时凭证可能接管云账号）
内网 Redis/数据库：未授权可交互即为严重
响应差异：端口开放/关闭、服务指纹、错误信息
报告标注：网络位置、出网方向、可达内网网段

六、修复建议

URL 白名单（协议+域名+端口），禁止私网地址
禁用重定向跟随、禁用危险协议（file/gopher/dict）
DNS 解析后二次校验 IP，防 DNS 重绑定
出口流量隔离、最小权限网络策略
云元数据服务：IMDSv2 + 限制访问

Frequently asked questions

What does the Ssrf Internal Network AI skill do?

Why use Ssrf Internal Network on TypingMind?

Because you install it once and use it with any model. Ssrf Internal Network is plain Markdown rather than provider-specific code, so the same skill runs on GPT-5, Claude, Gemini, Grok, or a local model — and you can switch model mid-chat without it breaking. TypingMind runs on your own API keys, so you pay providers directly instead of a per-seat subscription, and your skills and chats stay in your own storage.

How do I install Ssrf Internal Network in TypingMind?

Open Plugins → Skills → Install from GitHub in TypingMind and paste https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/ssrf-internal-network. TypingMind reads its SKILL.md and installs it as a skill you can enable per chat.

Which AI models can use Ssrf Internal Network?

Any model you connect in TypingMind. AI skills are plain Markdown instructions rather than provider-specific code, so GPT, Claude, Gemini, Grok, and local models can all load this skill when a request matches it.

How many AI models can I use with Ssrf Internal Network?

As many as you like. As long as a model supports skills, you can use Ssrf Internal Network with it — GPT, Claude, Gemini, Grok, DeepSeek, Mistral, Llama and more — all on TypingMind with your own API keys.

Is the Ssrf Internal Network AI skill free?

Yes. It is published on GitHub by zhaji2333 under the MIT license. You only pay your own AI provider for the tokens you use.

What are AI skills?

An AI skill is a reusable instruction bundle that teaches an AI model how to do one specific task. It follows the open Agent Skills format: a SKILL.md file with a name and description, plus any scripts, templates or reference files the model may need. The model reads the instructions only when your request matches the skill, so an installed skill costs nothing until it is used.

How are AI skills different from plugins or MCP servers?

A plugin or MCP server gives a model new tools to call — code that runs somewhere and returns a result. An AI skill gives the model knowledge and process instead: how to approach a task, which steps to follow, what good output looks like. Skills are plain Markdown, so they need no server, no API key and no runtime, and they work with any model.

View all

Pokemon Player

NousResearch

OrganizationPopular

Play Pokemon via headless emulator + RAM reads.

Docx

Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document',…

Openclaw Docker E2e Authoring

openclaw

OrganizationPopular

Author OpenClaw Docker E2E and live provider Docker lanes.

Openclaw Parallels Smoke

openclaw

OrganizationPopular

Prepare, snapshot, run, rerun, debug, or interpret OpenClaw Parallels guest install, onboarding, gateway smoke, and upgrade checks across macOS, Windows, and Linux.

Overview

Installation

Install in TypingMind

Install in another agent

Use it in TypingMind

Works with any AI model

Skill instructions

ssrf-internal-network — SSRF 与内网横向专项深度挖掘

何时调用（触发条件）

一、SSRF 场景清单

二、云元数据（打内网核心）

三、内网探测思路

四、绕过技术

五、验证要点

六、修复建议

Frequently asked questions

Related AI Skills

Set up your own AI workspace now