SSRFmap: Server Side Request Forgery services enumeration tool

-u, --url URL                    [Required] Vulnerable URL

-r, --range TARGET RANGE         [Optional] Target IP range to scan by CIDR (default: 127.0.0.1/32

-t, --target TARGET URL          [Optional] Target URL address or hostname

-d, --data POST_PARAMETERS       [Optional] POST parameters quoted: 'param1=a&param2=b'

-m, --method METHOD              [Optional] HTTP Verb to use, default is GET

    --regex REGEX                [Optional] String to identify false results (in case target always returns 200 OK)

-l, --length LENGTH              [Optional] Response length to identify false results (in case target always returns 200 OK)

-T, --threads LEVEL              [Optional] Aggressivity level [1,2,3,4,5], more aggressive means more requests per second. (default: 3)

-p, --port PORT                  [Optional] Scans for one port

-A, --all                        [Optional] Scan all ports (only in scan mode)

    --base64                     [Optional] Encode payload in base64

-h, --help                       Prints this help