渗透工具SSRFIRE：​自动 SSRF 查找器

./ssrfire.sh -d domain.com -s yourserver.com -f custom_file.txt -c cookies

domain.com ---> 要测试的域

yourserver.com--->检测 SSRF 的服务器。例如。打嗝合作者

custom_file.txt--->可选参数。您可以提供自己的自定义 URL，而不是使用 gau

<span style="color:#cac5bd"><span style="background-color:#111417"><span style="background-color:rgba(219, 221, 222, 0.1) !important"><code>#Replace /path/to/ with the specific directory where the tool is installed#If you already have configured paths for any of the tools, replace that code with the below one.ffuf(){        echo "Usage: ffuf https://www.domain.com/FUZZ payloads.txt"        /path/to/ffuf/./main -u $1 -w $2 -b $3 -c -t 100} gau(){        echo "Usage: gau domain.com"        /path/to/gau/./main $1} gau_s(){/path/to/gau/./main --subs $1} openredirex(){        echo "Usage: openredirex urls.txt payloads.txt"        python3 /path/to/OpenRedireX/openredirex.py -l $1 -p $2 --keyword FUZZ}qsreplace(){/path/to/qsreplace/./main $1}</code></span></span></span>

<span style="color:#cac5bd"><span style="background-color:#111417"><span style="background-color:rgba(219, 221, 222, 0.1) !important"><code>chmod +x setup.sh./setup.sh (preferably yes for all ---> **highly recommended**)./ssrfire.sh -d domain.com -s yourserver.com</code></span></span></span>

<span style="color:#cac5bd"><span style="background-color:#111417"><span style="background-color:rgba(219, 221, 222, 0.1) !important"><code>./ssrfire.sh -d domain.com -s yourserver.com -f /path/to/copied_raw_urls.txt</code></span></span></span>Select yes when asked whether to delete the existing folder.

This will skip the process of GAU fetching URLs.

Now all the URLs with parameters will be filtered and yourserver.com will be placed into their parameter values.(final_urls.txt)