> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery.md).

# Server Side Request Forgery

- [SSRFMap](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery/ssrfmap.md)
- [Surf](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery/surf.md): Filter a list of hosts, returning a list of viable SSRF candidates.
- [one-liners](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery/one-liners.md): Requires waybackurls output , gf, anew, httpx, qsreplace, burp-collaborator, ffuf
- [Top parameters](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery/top-parameters.md): Grep for these potentially vulnerable params
- [Dorks](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/server-side-request-forgery/dorks.md): Dorks for BBP and enum