{"id":13844675,"url":"https://github.com/junnlikestea/bulkssrf","last_synced_at":"2025-07-12T00:31:02.198Z","repository":{"id":222223324,"uuid":"276371028","full_name":"junnlikestea/bulkssrf","owner":"junnlikestea","description":"Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.","archived":false,"fork":false,"pushed_at":"2020-07-07T07:06:30.000Z","size":14,"stargazers_count":36,"open_issues_count":2,"forks_count":7,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-08-05T17:42:51.734Z","etag":null,"topics":["async","bugbounty-tool","rust","ssrf","tokio-rs"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/junnlikestea.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2020-07-01T12:24:46.000Z","updated_at":"2024-07-08T02:10:50.000Z","dependencies_parsed_at":"2024-02-13T02:44:13.962Z","dependency_job_id":null,"html_url":"https://github.com/junnlikestea/bulkssrf","commit_stats":null,"previous_names":["junnlikestea/bulkssrf"],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/junnlikestea%2Fbulkssrf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/junnlikestea%2Fbulkssrf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/junnlikestea%2Fbulkssrf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/junnlikestea%2Fbulkssrf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/junnlikestea","download_url":"https://codeload.github.com/junnlikestea/bulkssrf/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225772722,"owners_count":17521877,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["async","bugbounty-tool","rust","ssrf","tokio-rs"],"created_at":"2024-08-04T17:02:51.451Z","updated_at":"2024-11-21T17:30:39.780Z","avatar_url":"https://github.com/junnlikestea.png","language":"Rust","funding_links":[],"categories":["Rust (42)","Rust"],"sub_categories":[],"readme":"# BulkSSRF (bssrf)\n![release](https://github.com/junnlikestea/bulkssrf/workflows/release/badge.svg)\n[![Build status](https://github.com/junnlikestea/bulkssrf/workflows/Continuous%20integration/badge.svg)](https://github.com/junnlikestea/bulkssrf/actions)\n\nThis is a Rust port of [m4ll0k](https://twitter.com/m4ll0k2) `ssrf.py` script. \n\n### Installation\nPrecompiled binaries for bssrf are available in the [releases](https://github.com/junnlikestea/bulkssrf/releases) tab. Just pick your platform and extract the archive that contains the binary.\n\n## Building it yourself \nIf you want to build it yourself you will need to install Rust, you can get the [official installation](https://www.rust-lang.org/tools/install) from the Rust website.\n\nTo build BulkSSRF:\n```\n$ git clone https://github.com/junnlikestea/bulkssrf\n$ cd bulkssrf\n$ cargo build --release\n$ ./target/release/bssrf --version\n```\n\n### Usage\nWith a list of urls in a file:\n```\nbssrf -f path/to/file.txt -l xyzburpcollaborator.com\n```\n\nUsing a tool like `gau` to feed bssrf urls:\n```\ngau hackerone.com | bssrf -l xyzburpcollaborator.com\n```\n\nBy default the program has timeout set to 5 seconds, but you can alter that with the `-t` flag, you can also add various debugging\ninfo with the `-v` for verbose flag:\n```\ngau hackerone.com | bssrf -v -t 10 -l xyzburpcollaborator.com \n```\n\nIf you want to feed the traffic through an http proxy you can use the `-p` or `-replay-proxy` flag.\n```\ngau hackerone.com | bssrf -l xyzburpcollaborator.com -p http://127.0.0.1:8080\n```\n\n### Common error\nBulkSSRF uses async concurrent http requests under the hood. If you encounter an error similar to \"Too many open files\" it means that there isn't enough available file descriptors on your system. You can fix this by increasing the limits available. There are lots of different guides available to increase the limits, [but here is one for linux](https://www.tecmint.com/increase-set-open-file-limits-in-linux/). I actually ran into this problem while writing the code.\n\n### Disclaimer\nDevelopers have/has no responsibility or authority over any kind of:\n* Legal or Law infringement by third parties and users.\n* Malicious use capable of causing damage to third parties.\n* Illegal or unlawful use of bulkssrf.\n\nThanks to [0xatul](https://twitter.com/atul_hax) for the feedback!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjunnlikestea%2Fbulkssrf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjunnlikestea%2Fbulkssrf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjunnlikestea%2Fbulkssrf/lists"}