Exploit AI assistants equipped with web-browsing capabilities or internal API plugins to perform Server-Side Request Forgery (SSRF). This skill details injecting prompts that force the LLM to request sensitive internal endpoints, such as underlying cloud metadata services or internal networks.
$npx -y skills add shulkwisec/bb-huge --skill ai-data-extraction-via-ssrfInstalls into the current project.
Run `npx skills use "https://github.com/shulkwisec/bb-huge" --skill "shulkwisec/bb-huge/ai-data-extraction-via-ssrf"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/shulkwisec/bb-huge" that are relevant to the current task. Run `npx skills add "https://github.com/shulkwisec/bb-huge"` and select the relevant skills, then follow their instructions.