[
  {"id":"ssrf-adv-001","payload":"http://127.0.0.1:80","category":"ssrf","method":"GET","severity_hint":"critical","tags":["basic","loopback"],"notes":"Basic loopback","expected_block":true},
  {"id":"ssrf-adv-002","payload":"http://127.0.0.1:443","category":"ssrf","method":"GET","severity_hint":"critical","tags":["basic","loopback","https-port"],"notes":"Loopback HTTPS port","expected_block":true},
  {"id":"ssrf-adv-003","payload":"http://127.0.0.1:8080","category":"ssrf","method":"GET","severity_hint":"critical","tags":["basic","loopback","alt-port"],"notes":"Loopback alt port","expected_block":true},
  {"id":"ssrf-adv-004","payload":"http://127.0.0.1:8443","category":"ssrf","method":"GET","severity_hint":"critical","tags":["basic","loopback","alt-port"],"notes":"Loopback HTTPS alt port","expected_block":true},
  {"id":"ssrf-adv-005","payload":"http://0.0.0.0","category":"ssrf","method":"GET","severity_hint":"critical","tags":["zero-ip"],"notes":"0.0.0.0 all interfaces","expected_block":true},
  {"id":"ssrf-adv-006","payload":"http://0","category":"ssrf","method":"GET","severity_hint":"critical","tags":["zero-ip","shorthand"],"notes":"Shorthand zero IP","expected_block":true},
  {"id":"ssrf-adv-007","payload":"http://0x7f000001","category":"ssrf","method":"GET","severity_hint":"critical","tags":["hex-ip","evasion"],"notes":"Hex encoded 127.0.0.1","expected_block":true},
  {"id":"ssrf-adv-008","payload":"http://2130706433","category":"ssrf","method":"GET","severity_hint":"critical","tags":["decimal-ip","evasion"],"notes":"Decimal encoded 127.0.0.1","expected_block":true},
  {"id":"ssrf-adv-009","payload":"http://0177.0.0.1","category":"ssrf","method":"GET","severity_hint":"critical","tags":["octal-ip","evasion"],"notes":"Octal encoded 127.0.0.1","expected_block":true},
  {"id":"ssrf-adv-010","payload":"http://0x7f.0x0.0x0.0x1","category":"ssrf","method":"GET","severity_hint":"critical","tags":["hex-dotted","evasion"],"notes":"Hex dotted notation","expected_block":true},
  {"id":"ssrf-adv-011","payload":"http://127.1","category":"ssrf","method":"GET","severity_hint":"critical","tags":["shorthand","loopback"],"notes":"Abbreviated 127.0.0.1","expected_block":true},
  {"id":"ssrf-adv-012","payload":"http://127.0.1","category":"ssrf","method":"GET","severity_hint":"critical","tags":["shorthand","loopback"],"notes":"Three-octet abbreviated","expected_block":true},
  {"id":"ssrf-adv-013","payload":"http://[::1]","category":"ssrf","method":"GET","severity_hint":"critical","tags":["ipv6","loopback"],"notes":"IPv6 loopback","expected_block":true},
  {"id":"ssrf-adv-014","payload":"http://[::ffff:127.0.0.1]","category":"ssrf","method":"GET","severity_hint":"critical","tags":["ipv6","mapped","evasion"],"notes":"IPv6-mapped IPv4 loopback","expected_block":true},
  {"id":"ssrf-adv-015","payload":"http://[0:0:0:0:0:ffff:127.0.0.1]","category":"ssrf","method":"GET","severity_hint":"critical","tags":["ipv6","expanded","evasion"],"notes":"Expanded IPv6-mapped","expected_block":true},
  {"id":"ssrf-adv-016","payload":"http://[::]","category":"ssrf","method":"GET","severity_hint":"critical","tags":["ipv6","any"],"notes":"IPv6 any address","expected_block":true},
  {"id":"ssrf-adv-017","payload":"http://169.254.169.254/latest/meta-data/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","aws","metadata"],"notes":"AWS metadata service","expected_block":true},
  {"id":"ssrf-adv-018","payload":"http://169.254.169.254/latest/meta-data/iam/security-credentials/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","aws","iam","credentials"],"notes":"AWS IAM credentials","expected_block":true},
  {"id":"ssrf-adv-019","payload":"http://169.254.169.254/latest/user-data/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","aws","userdata"],"notes":"AWS user data (may contain secrets)","expected_block":true},
  {"id":"ssrf-adv-020","payload":"http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","aws","imdsv2"],"notes":"AWS IMDS identity credentials","expected_block":true},
  {"id":"ssrf-adv-021","payload":"http://metadata.google.internal/computeMetadata/v1/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","gcp","metadata"],"notes":"GCP metadata endpoint","expected_block":true},
  {"id":"ssrf-adv-022","payload":"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","gcp","token"],"notes":"GCP service account token","expected_block":true},
  {"id":"ssrf-adv-023","payload":"http://metadata.google.internal/computeMetadata/v1/project/project-id","category":"ssrf","method":"GET","severity_hint":"high","tags":["cloud","gcp","project"],"notes":"GCP project ID","expected_block":true},
  {"id":"ssrf-adv-024","payload":"http://169.254.169.254/metadata/instance?api-version=2021-02-01","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","azure","metadata"],"notes":"Azure IMDS endpoint","expected_block":true},
  {"id":"ssrf-adv-025","payload":"http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","azure","token"],"notes":"Azure managed identity token","expected_block":true},
  {"id":"ssrf-adv-026","payload":"http://100.100.100.200/latest/meta-data/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","alibaba","metadata"],"notes":"Alibaba Cloud metadata","expected_block":true},
  {"id":"ssrf-adv-027","payload":"http://169.254.169.254/openstack/latest/meta_data.json","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","openstack","metadata"],"notes":"OpenStack metadata","expected_block":true},
  {"id":"ssrf-adv-028","payload":"http://169.254.169.254/metadata/v1.json","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","digitalocean","metadata"],"notes":"DigitalOcean metadata","expected_block":true},
  {"id":"ssrf-adv-029","payload":"http://169.254.169.254/v1/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["cloud","oracle","metadata"],"notes":"Oracle Cloud metadata","expected_block":true},
  {"id":"ssrf-adv-030","payload":"http://127.0.0.1:2375/containers/json","category":"ssrf","method":"GET","severity_hint":"critical","tags":["docker","api"],"notes":"Docker API container list","expected_block":true},
  {"id":"ssrf-adv-031","payload":"http://127.0.0.1:2375/images/json","category":"ssrf","method":"GET","severity_hint":"critical","tags":["docker","api"],"notes":"Docker API image list","expected_block":true},
  {"id":"ssrf-adv-032","payload":"http://127.0.0.1:10250/pods","category":"ssrf","method":"GET","severity_hint":"critical","tags":["kubernetes","kubelet"],"notes":"Kubelet API pod list","expected_block":true},
  {"id":"ssrf-adv-033","payload":"http://127.0.0.1:10255/pods","category":"ssrf","method":"GET","severity_hint":"critical","tags":["kubernetes","kubelet","readonly"],"notes":"Kubelet read-only pod list","expected_block":true},
  {"id":"ssrf-adv-034","payload":"http://127.0.0.1:6443/api/v1/namespaces","category":"ssrf","method":"GET","severity_hint":"critical","tags":["kubernetes","api-server"],"notes":"K8s API server namespaces","expected_block":true},
  {"id":"ssrf-adv-035","payload":"http://127.0.0.1:2379/v2/keys/?recursive=true","category":"ssrf","method":"GET","severity_hint":"critical","tags":["etcd","secrets"],"notes":"etcd key dump","expected_block":true},
  {"id":"ssrf-adv-036","payload":"http://127.0.0.1:8500/v1/agent/self","category":"ssrf","method":"GET","severity_hint":"critical","tags":["consul","service-mesh"],"notes":"Consul agent info","expected_block":true},
  {"id":"ssrf-adv-037","payload":"http://127.0.0.1:8200/v1/sys/health","category":"ssrf","method":"GET","severity_hint":"critical","tags":["vault","secrets"],"notes":"HashiCorp Vault health","expected_block":true},
  {"id":"ssrf-adv-038","payload":"http://127.0.0.1:9200/_cat/indices","category":"ssrf","method":"GET","severity_hint":"critical","tags":["elasticsearch","data"],"notes":"Elasticsearch indices","expected_block":true},
  {"id":"ssrf-adv-039","payload":"http://127.0.0.1:6379/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["redis","cache"],"notes":"Redis service probe","expected_block":true},
  {"id":"ssrf-adv-040","payload":"gopher://127.0.0.1:6379/_*1%0d%0a%0d%0aflushall%0d%0a","category":"ssrf","method":"GET","severity_hint":"critical","tags":["gopher","redis","rce"],"notes":"Gopher Redis interaction","expected_block":true},
  {"id":"ssrf-adv-041","payload":"gopher://127.0.0.1:25/_HELO%20attacker%0d%0aMAIL%20FROM:<attacker@test.com>%0d%0a","category":"ssrf","method":"GET","severity_hint":"critical","tags":["gopher","smtp"],"notes":"Gopher SMTP interaction","expected_block":true},
  {"id":"ssrf-adv-042","payload":"dict://127.0.0.1:6379/info","category":"ssrf","method":"GET","severity_hint":"critical","tags":["dict","redis","protocol"],"notes":"DICT protocol Redis info","expected_block":true},
  {"id":"ssrf-adv-043","payload":"file:///etc/passwd","category":"ssrf","method":"GET","severity_hint":"critical","tags":["file-uri","protocol"],"notes":"file:// protocol handler","expected_block":true},
  {"id":"ssrf-adv-044","payload":"http://attacker.com@127.0.0.1/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["url-confusion","credentials"],"notes":"URL authority confusion","expected_block":true},
  {"id":"ssrf-adv-045","payload":"http://127.0.0.1#@attacker.com/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["url-confusion","fragment"],"notes":"Fragment-based confusion","expected_block":true},
  {"id":"ssrf-adv-046","payload":"http://127.0.0.1%23@attacker.com/","category":"ssrf","method":"GET","severity_hint":"critical","tags":["url-confusion","encoded"],"notes":"Encoded fragment confusion","expected_block":true},
  {"id":"ssrf-adv-047","payload":"http://127。0。0。1","category":"ssrf","method":"GET","severity_hint":"critical","tags":["unicode","ideographic-dot"],"notes":"Ideographic full stop bypass","expected_block":true},
  {"id":"ssrf-adv-048","payload":"http://①②⑦.⓪.⓪.①","category":"ssrf","method":"GET","severity_hint":"critical","tags":["unicode","circled-numbers"],"notes":"Unicode circled numbers","expected_block":true},
  {"id":"ssrf-adv-049","payload":"http://127.0.0.1.nip.io","category":"ssrf","method":"GET","severity_hint":"critical","tags":["dns-rebind","wildcard"],"notes":"Wildcard DNS service","expected_block":true},
  {"id":"ssrf-adv-050","payload":"http://localtest.me","category":"ssrf","method":"GET","severity_hint":"critical","tags":["dns-rebind","localhost"],"notes":"DNS resolving to 127.0.0.1","expected_block":true}
]