SSRFmap

python ssrfmap.py -r <request.txt> -p <param> -m readfiles

Tool to exploit SSRF (Server-Side Request Forgery) via modules like file reading, internal ports, etc.

When you have detected a parameter that appears vulnerable to SSRF (e.g., url, path, redirect). SSRFmap allows testing different modules: reading files (file://), scanning internal ports, interacting with services (redis, etc.), and obtaining cloud information. It is very useful for exploiting SSRF in cloud environments.

If the SSRF is blind and there is no visible response, SSRFmap may not work well. Also if the target has protocol restrictions or firewalls that block requests.