ssrfuzzer

Fuzzer script for finding hidden parameters and SSRF for bug bounty.

Requirements

• curl
• gau
• Burp Professional

Usage

1. Run Burp proxy on http://127.0.0.1:8080
2. Run Burp Collaborator client
3. Run script with ./ssrfuzz.sh <domain> <burp collaborator link> <parameter list>

Credits to Santosh Kumar Sha for idea.