# AutoSSRF | Smart Context-Based SSRF Vulnerabiltiy Scanner **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, hacking, freebies\ **Created:** [November 14, 2022, 8:36pm UTC](https://onehack.st/t/autossrf-smart-context-based-ssrf-vulnerabiltiy-scanner/228395 "2022-11-14T20:36:13Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Post date:** [November 14, 2022, 8:36pm UTC](https://onehack.st/t/autossrf-smart-context-based-ssrf-vulnerabiltiy-scanner/228395/1 "2022-11-14T20:36:13Z")
![image](https://onehack.st/uploads/default/original/3X/d/4/d416106dc891756d5d6c63633bead5d71296c3ae.png) ### Summary **autoSSRF** is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features : - **Smart fuzzing on relevant SSRF GET parameters** When fuzzing, **autoSSRF** only focuses on the common parameters related to SSRF (`?url=`, `?uri=`, ..) and doesn’t interfere with everything else. This ensures that the original URL is still correctly understood by the tested web-application, something that might doesn’t happen with a tool which is blindly spraying query parameters. - **Context-based dynamic payloads generation** For the given URL : `https://host.com/?fileURL=https://authorizedhost.com`, **autoSSRF** would recognize _[authorizedhost.com](http://authorizedhost.com)_ as a potentially white-listed host for the web-application, and generate payloads dynamically based on that, attempting to bypass the white-listing validation. It would result to interesting payloads such as : `http://authorizedhost.attacker.com`, `http://authorizedhost%252F@attacker.com`, etc. Furthermore, this tool guarantees almost no **false-positives**. The detection relies on the great ProjectDiscovery’s _[interactsh](https://github.com/projectdiscovery/interactsh)_, allowing **autoSSRF** to confidently identify out-of-band DNS/HTTP interactions. * * * ### Usage python3 autossrf.py -h This displays help for the tool. usage: autossrf.py [-h] [–file FILE] [–url URL] [–output] [–verbose] options: -h, --help show this help message and exit --file FILE, -f FILE file of all URLs to be tested against SSRF --url URL, -u URL url to be tested against SSRF --output, -o output file path --verbose, -v activate verbose mode Single URL target: python3 autossrf.py -u [https://www.host.com/?param1=X¶m2=Y¶m2=Z](https://www.host.com/?param1=X¶m2=Y¶m2=Z) Multiple URLs target with verbose: python3 autossrf.py -f urls.txt -v * * * ### Installation 1 - Clone git clone [https://github.com/Th0h0/autossrf.git](https://github.com/Th0h0/autossrf.git) 2 - Install requirements Python libraries : cd autossrf pip install -r requirements.txt Interactsh-Client : go install -v [github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest](http://github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest) * * * ### License **autoSSRF** is distributed under [MIT License](https://github.com/Th0h0/autossrf/blob/master/LICENSE.md). ## GitHub: > **[GitHub - Th0h0/autossrf: Smart context-based SSRF vulnerability scanner.](https://github.com/Th0h0/autossrf)** > > Smart context-based SSRF vulnerability scanner.