XowiaScan
← All tools

SSRF Payload Generator

Generators

Convert IPs and hosts into hex, octal, decimal and other SSRF filter-bypass payloads.

What is SSRF Payload Generator?

SSRF Payload Generator transforms a target address into the many alternate representations that defeat naive blocklists — decimal, octal, hex, mixed encodings and more.

When a filter blocks 127.0.0.1 or 169.254.169.254, these equivalent forms often slip through; this tool generates them all at once.

What it generates

  • Numeric encodings — decimal, octal and hex representations of an IP.
  • Mixed & padded forms — combinations that bypass simple parsers.
  • Localhost & metadata variants — alternate ways to reach 127.0.0.1 and cloud metadata.
  • Bulk output — every variant ready to copy into your fuzzer.

Where it fits in your workflow

  • Bypass blocklist-based SSRF filters during exploitation.
  • Feed variants into the SSRF Fuzzer or your proxy.
Use SSRF Payload Generator

Free, in-browser — no sign-up needed to try.

Create free account Sign in

At a glance

CategoryGenerators
RunsIn your browser
Token cost Free — no tokens
AccessFree · no login to try
Status● Live

Frequently asked questions

Why do alternate IP formats work?

Many parsers accept non-standard notations (octal, decimal, hex) that resolve to the same address, while blocklists only check the dotted-quad form — so the equivalents bypass the filter.

Explore more tools →