# Chain Ssrf To Rce

> Chain Ssrf To Rce is an Agent Skill for devops & security published in the PurpleAILAB/Decepticon repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

- Skill name: `chain-ssrf-to-rce`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/PurpleAILAB/Decepticon/blob/HEAD/packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md
- Repository: PurpleAILAB/Decepticon (4,718 GitHub stars when collected)

## SKILL.md

# Chain: SSRF to RCE

## Canonical path
1. SSRF reaches metadata/internal control plane.
2. Extract credential/token or access internal admin API.
3. Use credential to deploy or execute payload.
4. Confirm code execution and business impact.

## Graph guidance
- Add `enables` edges for each pivot.
- Lower weights for direct pivots; higher for speculative pivots.
- Run `plan_attack_chains` and then `suggest_objectives_from_chains`.

---

Source: https://www.openparable.com/skill/devops-security/chain-ssrf-to-rce (OpenParable). Cite the canonical URL above.