SSRF Detection Overview Find, exploit, and fix Server-Side Request Forgery. SSRF tricks the server into making HTTP requests to unintended destinations — accessing internal services, cloud metadata, or other systems that the server can reach but the attacker cannot. Instructions How SSRF Works Any feature that takes a URL from user input and fetches it server-side is a potential SSRF vector: - Image/file URL imports ("paste image URL") - Webhook configurations - PDF generators that fetch external resources - URL preview/unfurl features (Slack-style link previews) - API integrations with user-…