The newest Server-Side Request Forgery (SSRF) resources are on the Server-Side Request Forgery (SSRF) page. For a reading order instead of a date order, see the Server-Side Request Forgery (SSRF) learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2025-08-14 2025 | Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail | by S advanced RCE | The content discusses escalating a Blind Server-Side Request Forgery (SSRF) vulnerability to Remote Code Execution (RCE) in Yahoo Mail, earning a reward of $15,000. The author shares their experience and techniques used to exploit the vulnerability, highlighting the importance of thorough testing and persistence in finding security flaws. The title "Just Gopher It" suggests a playful approach to tackling the challenge, emphasizing the need for creativity and determination in cybersecurity research. |
| 2025-08-14 2025 | Cloud SSRF beginner 13 min read | Reference detailing Cloud SSRF vulnerabilities, specifically focusing on AWS EC2 metadata endpoints. It explains how to exploit the EC2 metadata service (IMDSv1 and IMDSv2) to extract sensitive information like IAM role credentials, instance details, and network configurations. The entry also covers SSRF techniques for ECS and EKS environments, including accessing container credentials via `/v2/credentials/` and utilizing Pod Identity in EKS by reading environment variables and service account token files. → book.hacktricks.xyz |
| 2025-08-14 2025 | SSRF vulnerabilities and where to find them intermediate 6 min read | Guide to Server-Side Request Forgery (SSRF) vulnerabilities, detailing their nature, common discovery locations like webhook integrations and file imports, and effective bypass techniques. The guide highlights tools such as the HUNT Burp Suite extension and discusses exploitation methods including DNS rebinding, HTTP redirects, and non-standard IP notations, referencing work by Nahamsec and Cody Brocious concerning PDF generators. It differentiates between blind, partial-blind, and non-blind SSRF, and provides common parameter names to look for during testing. → labs.detectify.com |
| 2025-08-14 2025 | PHP SSRF Techniques. How to bypass filter_var()… | by theMiddle | secjuice™ intermediate | The content discusses PHP Server-Side Request Forgery (SSRF) techniques and how to bypass the filter_var() function. It likely delves into methods to manipulate input validation functions in PHP to exploit SSRF vulnerabilities. The author may provide insights on how attackers can circumvent security measures to perform SSRF attacks. The focus is on understanding and potentially exploiting weaknesses in PHP applications related to SSRF. |
| 2025-08-14 2025 | How i found an SSRF in Yahoo! Guesthouse (Recon Wins) | by Th3G3nt3lman | M intermediate | The content appears to be a blog post or article titled "How I found an SSRF in Yahoo! Guesthouse" by an author named Th3G3nt3lman. The focus seems to be on discovering a Server-Side Request Forgery (SSRF) vulnerability in Yahoo! Guesthouse through reconnaissance efforts. The author likely shares their experience, methods used, and the importance of reconnaissance in identifying security vulnerabilities. |
| 2025-08-14 2025 | Reading Internal Files using SSRF vulnerability | by Neeraj Sonaniya | Medi intermediate | The content discusses the exploitation of Server-Side Request Forgery (SSRF) vulnerability to read internal files. The author, Neeraj Sonaniya, explores how SSRF can be used to access sensitive information stored on a server. This vulnerability allows an attacker to manipulate a server into making requests on their behalf, potentially leading to unauthorized access to internal files. The article likely provides insights into the risks associated with SSRF vulnerabilities and how they can be mitigated to protect against unauthorized data access. |
| 2025-08-14 2025 | qazbnm456/awesome-web-security beginner 23 min read XSS | Library of curated web security resources, covering techniques and tools for XSS, SQL Injection, Command Injection, SSRF, XXE, CSRF, Clickjacking, and more. It includes guides on specific vulnerabilities like CVE-2019-7609 in Kibana, alongside numerous digests, forums, and practical examples from sources like PortSwigger, Google, and @swisskyrepo, aiming to bolster penetration testing skills. |
| 2025-08-14 2025 | GitHub - bcoles/ssrf_proxy: SSRF Proxy facilitates tunneling HTTP communica intermediate 3 min read | Library for tunneling HTTP traffic through SSRF-vulnerable servers. SSRF Proxy formats client requests for vulnerable servers and parses their responses, enabling its use with browsers, proxychains, and scanning tools like sqlmap, nmap, dirb, and nikto. It also aids in blind SSRF time-based attacks, such as blind time-based SQL injection. |
| 2025-08-14 2025 | AppSecEU15-Server_side_browsing_considered_harmful.pdf intermediate | The content provided is the title of a document named "AppSecEU15-Server_side_browsing_considered_harmful.pdf." The title suggests that the document likely discusses the potential risks or negative implications associated with server-side browsing in the context of application security. It implies that server-side browsing may pose threats or vulnerabilities that could be harmful to the security of applications. The document may delve into the reasons why server-side browsing is considered detrimental and provide insights on how to mitigate these risks. |
| 2025-08-14 2025 | What is server-side request forgery (SSRF)? | Acunetix beginner 5 min read | Reference on Server-Side Request Forgery (SSRF) detailing its OWASP Top 10 classification and use in breaches like Capital One and MS Exchange. It explains how SSRF allows attackers to send crafted requests from a vulnerable back-end server, targeting internal systems or loopback interfaces. Techniques discussed include exploiting URL schemas like `file:///` and `dict://`, accessing cloud metadata such as AWS EC2, and potential escalation to RCE. Mitigation strategies involve whitelisting hostnames/IPs, proper input validation, disabling unused URL schemas, and enabling authentication on internal services. Detection relies on out-of-band scanning, with Acunetix utilizing AcuMonitor. → acunetix.com |
| 2025-08-14 2025 | SSRF bible. Cheatsheet - Google Docs intermediate | The content provided is titled "SSRF bible. Cheatsheet" on Google Docs. It appears to be a document or resource related to Server-Side Request Forgery (SSRF), a type of web security vulnerability. The document likely contains a compilation of information, tips, and techniques related to SSRF attacks and defenses. It may serve as a quick reference guide or cheat sheet for individuals looking to understand and protect against SSRF vulnerabilities. → docs.google.com |
| 2025-08-14 2025 | The Tale Of SSRF To RCE on .GOV Domain | by Tobydavenn | Sep, 2022 | Medium intermediate RCE | The content is titled "The Tale Of SSRF To RCE on .GOV Domain" by Tobydavenn on Medium in September 2022. It likely discusses a story or experience related to exploiting SSRF (Server-Side Request Forgery) vulnerabilities to achieve Remote Code Execution (RCE) on a .GOV domain. The article may provide insights into cybersecurity, hacking techniques, and the importance of securing government websites against such attacks. |
| 2025-08-14 2025 | (640) An overlooked parameter leads to a critical SSRF in Dropbox bug bount intermediate Bug Bounty | The content discusses a critical Server-Side Request Forgery (SSRF) vulnerability discovered in Dropbox's bug bounty program due to an overlooked parameter. This vulnerability could potentially allow attackers to manipulate server requests and access sensitive information. The SSRF flaw was identified as a significant security issue that could have serious consequences if exploited. This finding highlights the importance of thorough security testing and the need for companies to prioritize identifying and addressing such vulnerabilities to protect their systems and data. |
| 2025-08-14 2025 | SSRF Bypass List intermediate | Reference list of common HTTP headers, including `X-Forwarded-For`, `X-Forwarded-Port`, `X-Real-Ip`, and `Referer`, that can be manipulated to bypass SSRF protections. This compilation details numerous header variations and their typical values that attackers exploit when targeting applications to access internal resources or pivot within a network. |
| 2025-08-14 2025 | Walkthrough weather app hack the box web challenge intermediate | The content is a walkthrough of a web challenge called "Weather App" from the platform Hack The Box. It provides a step-by-step guide on how to solve the challenge, including identifying vulnerabilities, exploiting them, and gaining access to the target system. The walkthrough covers topics such as reconnaissance, enumeration, exploitation, and privilege escalation. It aims to help readers understand the process of hacking a web application and improving their cybersecurity skills. → infosecwriteups.com |
| 2025-08-14 2025 | Server Side Request Forgery (SSRF) Attacks & How to Prevent Them - Bright S beginner 8 min read | Library detailing Server-Side Request Forgery (SSRF) attacks, covering techniques like accessing cloud provider metadata (e.g., http://169.254.169.254), exploiting internal services via schemes such as `file://` and `gopher://`, and port scanning internal networks using loopback interfaces. It discusses the impact of these vulnerabilities, including unauthorized access to sensitive configurations and exploit chaining, and provides insights into preventing SSRF by avoiding blacklisting domains and IPs. → brightsec.com |
| 2025-08-14 2025 | SSRF Vulnerability From a Developer’s Perspective | by Gupta Bless | Geek C beginner | The content discusses Server-Side Request Forgery (SSRF) vulnerability from a developer's perspective. It is written by Gupta Bless on Geek C. The article likely delves into the implications, risks, and potential solutions related to SSRF vulnerabilities in web applications, providing insights and guidance for developers to understand and address this security concern effectively. |
| 2025-08-14 2025 | Multiple HTTP redirects to bypass SSRF protections intermediate | The content discusses a technique using multiple HTTP redirects to bypass Server-Side Request Forgery (SSRF) protections. By chaining together several HTTP redirects, an attacker can manipulate the server to access internal resources or perform unauthorized actions. This method can be used to exploit vulnerabilities in web applications that are susceptible to SSRF attacks. The article provides insights into how attackers can leverage this technique and offers recommendations for organizations to strengthen their defenses against SSRF vulnerabilities. → infosecwriteups.com |
| 2025-08-14 2025 | WSTG - v4.2 | OWASP Foundation intermediate 3 min read | Guide for testing Server-Side Request Forgery (SSRF) vulnerabilities in web applications. It details how SSRF can grant attackers access to restricted actions, internal services, or files, potentially leading to Remote Code Execution (RCE). The guide covers identifying injection points, testing exploitability, assessing severity, and techniques for bypassing filters using decimal, octal, and shortened IP representations, along with URL obfuscation methods. It also discusses blind SSRF scenarios and provides remediation advice emphasizing allow lists. → owasp.org |
| 2025-08-14 2025 | Server-Side Request Forgery (SSRF) - Intigriti beginner 5 min read | Library detailing Server-Side Request Forgery (SSRF) vulnerabilities, explaining how attackers can leverage application functionality to send requests from the server's network. It covers techniques for identifying SSRF using intercepting proxies like Burp Suite, differentiating between basic and blind SSRF, and testing for vulnerabilities by targeting internal IP addresses, cloud provider metadata APIs, and using various URL schemes like `file://` and `gopher://`. Prevention strategies include whitelisting accessible services, disabling unnecessary URL schemes, and implementing authentication on internal services. |
| 2025-08-14 2025 | GitHub - swisskyrepo/SSRFmap: Automatic SSRF fuzzer and exploitation tool intermediate 4 min read | Tool for fuzzing and exploiting Server Side Request Forgery (SSRF) vulnerabilities. SSRFmap processes Burp request files, allowing targeted fuzzing of specific parameters to discover and leverage SSRF flaws. It supports various modules for actions like port scanning, reading files, and triggering reverse shells, with options for custom user agents, HTTPS, and WAF bypass levels. |
| 2025-08-14 2025 | MindPatch/lorsrf: Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :crab: beginner 2 min read | Tool for identifying SSRF or Out-of-band resource load vulnerabilities. Lorsrf adds an OAST host to parameter values to generate requests received by services like Burp Collaborator, without revealing target information directly. It supports custom variables for the OAST host, including target domain, endpoint, query, and request method, enhancing vulnerability identification. Lorsrf allows for GET, POST (form-encoded or JSON), and POST-only requests and can integrate with tools like `waybackurls`. |
| 2025-08-14 2025 | 10 Types of Web Vulnerabilities that are Often Missed - Detectify Labs beginner 16 min read XSS XXE | Library of 10 web vulnerabilities often missed by security testers, including HTTP/2 Smuggling via request desyncs and XXE via Office Open XML parsers. It also details SSRF via XSS in PDF generators and XSS via SVG files, providing techniques and examples for exploitation and detection. → labs.detectify.com |
| 2025-08-14 2025 | Beginner Guide To Exploit Server Side Request Forgery (SSRF) Vulnerability beginner | The content is a beginner's guide to exploiting Server Side Request Forgery (SSRF) vulnerability. It likely covers the basics of identifying and exploiting SSRF vulnerabilities, which involve manipulating a server to make unauthorized requests on behalf of the attacker. The guide may provide insights into how SSRF vulnerabilities can be leveraged for malicious purposes and the potential risks associated with such exploits. It serves as an introductory resource for individuals looking to understand and potentially exploit SSRF vulnerabilities. → infosecwriteups.com |
| 2025-08-14 2025 | On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found beginner | The content discusses SSRF (Server Side Request Forgery) and the discoveries made by Rodolfo related to this vulnerability. SSRF involves manipulating a server to make unauthorized requests on behalf of the attacker. Rodolfo's findings likely pertain to identifying and potentially exploiting SSRF vulnerabilities. This type of attack can have serious consequences, allowing attackers to access sensitive information or internal systems. It is crucial for organizations to be aware of SSRF risks and implement security measures to prevent such attacks. |
| 2025-08-14 2025 | SSRF In The Wild - Vickie Li’s Security Blog intermediate 6 min read | Analysis of publicly disclosed SSRF vulnerabilities found on HackerOne, examining over 76 reports to identify common locations like file uploads, proxies, and webhooks. The research reveals that many vulnerabilities exist in features lacking prior protection, with fixes often involving blacklisting. The analysis highlights the versatility of SSRFs and encourages researchers to explore escalation potential, while also advocating for more comprehensive public disclosures of vulnerability details. |
| 2025-08-14 2025 | SSRF - HowToHunt beginner | The content appears to be about Server-Side Request Forgery (SSRF) and a guide or tutorial called "HowToHunt" related to this topic. SSRF is a security vulnerability that allows an attacker to manipulate a server into making unauthorized requests. The "HowToHunt" guide likely provides information on how to identify and mitigate SSRF vulnerabilities. It seems to be a concise reference or resource for individuals interested in learning more about SSRF and how to protect against it. |
| 2025-08-14 2025 | SSRF Cheat Sheet & Bypass Techniques intermediate 4 min read | Cheatsheet detailing Server-Side Request Forgery (SSRF) vulnerabilities, covering identification techniques, and bypass methods for whitelist filters. It explores URL schema wrappers in PHP, ASP.NET, Java, and cURL, alongside techniques like DNS rebinding and open redirects. The guide also touches upon post-exploitation enumeration using tools like Burp Collaborator and Intruder. |
| 2025-08-14 2025 | The journey of Web Cache Firewall Bypass to SSRF to AWS credentials compr advanced | The content discusses the progression from a Web Cache Firewall Bypass to Server-Side Request Forgery (SSRF) and ultimately obtaining AWS credentials through a comprehensive process. This journey likely involves exploiting vulnerabilities in web systems to bypass security measures, manipulate server requests, and ultimately gain access to sensitive AWS credentials. The content highlights the evolution of techniques used by attackers to compromise systems and underscores the importance of robust security measures to prevent such breaches. |
| 2025-08-14 2025 | Server Side Request Forgery beginner | Server Side Request Forgery (SSRF) is a vulnerability where an attacker tricks a server into making unintended requests on their behalf. This can lead to unauthorized access to internal systems, data leaks, and potential server exploitation. Preventing SSRF involves input validation, using whitelists for allowed URLs, and restricting access to sensitive resources. It is crucial for developers and organizations to be aware of SSRF risks and implement security measures to mitigate this threat. → 0xn3va.gitbook.io |
| 2025-08-14 2025 | A Glossary of Blind SSRF Chains – Assetnote advanced 9 min read | Glossary of Blind SSRF Chains, detailing techniques for exploiting Server-Side Request Forgery when response data is unavailable. It covers methodologies like using SSRF canaries to confirm internal service reachability, leveraging DNS data with tools such as AltDNS for internal host discovery, and identifying side-channel leaks through response errors, sizes, and timings. Specific examples include chaining with internal SSRFs, app-specific open redirects, blind XXE, and mentions of vulnerabilities affecting Confluence, Artifactory, Jenkins, JAMF, and Apache mod_proxy (CVE-2021-40438). |
| 2025-08-14 2025 | ethicalhackingplayground/ssrf-king: SSRF plugin for burp Automates SSRF Detection in all of the Request intermediate 1 min read | Library for automated SSRF detection in Burp Suite. SSRF King tests all parts of HTTP requests for external interactions, alerting users to vulnerable endpoints, hosts, and locations. It supports passive and active scanning, with future enhancements including a user interface for custom callbacks and testing JSON & XML payloads. The library also checks for SMTP SSRF and identifies open redirects by verifying if interactions originate from the user's IP. |
| 2025-08-14 2025 | A Pentester’s Guide to Server Side Request Forgery (SSRF) beginner 2 min read | Cheatsheet detailing Server-Side Request Forgery (SSRF) techniques. It covers exploiting functionality that reads or submits data to URLs, enabling attackers to access internal resources like AWS metadata, MongoDB interfaces, or local files via protocols such as `file://`, `sftp://`, `dict://`, `tftp://`, `ldap://`, and `gopher://`. The guide also provides payloads for localhost access, XSS integration, iframe injection, and cloud-specific metadata endpoints for AWS, Google Cloud, and Azure. → cobalt.io |
| 2025-08-14 2025 | Dark Side 108: Intro to SSRF — Server-Side Request Forgery | by Katlyn Gall beginner | The content titled "Dark Side 108: Intro to SSRF — Server-Side Request Forgery" by Katlyn Gall likely introduces readers to the concept of SSRF (Server-Side Request Forgery). SSRF involves manipulating a server into making unintended requests, potentially leading to security vulnerabilities. The article may delve into the risks associated with SSRF attacks and ways to prevent them. It serves as an introductory guide to understanding and addressing SSRF threats in web applications. |
| 2025-08-14 2025 | $10000 Facebook SSRF (Bug Bounty) | by Amine Aboud | Medium intermediate | The content is titled "$10000 Facebook SSRF (Bug Bounty)" by Amine Aboud on Medium. It likely discusses a security vulnerability known as Server-Side Request Forgery (SSRF) found on Facebook, which was eligible for a bug bounty reward of $10,000. The article may detail the discovery and reporting process of this SSRF bug on Facebook's platform, highlighting the importance of bug bounty programs in enhancing cybersecurity. |
| 2025-08-14 2025 | Blind SSRF - The Hide & Seek Game | by Jerry Shah (Jerry) | Medium intermediate | The content titled "Blind SSRF - The Hide & Seek Game" by Jerry Shah on Medium likely discusses the concept of Server-Side Request Forgery (SSRF) vulnerabilities, where attackers manipulate a server into making unauthorized requests. The title suggests a focus on a specific type of SSRF attack known as Blind SSRF, which involves making requests without receiving direct responses. The author, Jerry Shah, may delve into the intricacies of this type of attack and provide insights on how to detect and prevent Blind SSRF vulnerabilities. |
| 2025-08-14 2025 | Server-Side Request Forgery — SSRF: Exploitation Technique | by goswamiijay intermediate | The content titled "Server-Side Request Forgery — SSRF: Exploitation Technique" by goswamiijay likely discusses the concept of Server-Side Request Forgery (SSRF) as an exploitation technique. SSRF involves manipulating a server into making unintended requests, potentially leading to unauthorized access or data leakage. The article may delve into how SSRF attacks work, their impact on web applications, and strategies to prevent such vulnerabilities. |
| 2025-08-14 2025 | Exploiting: SSRF For Admin Access | by Gupta Bless | InfoSec Write-ups intermediate | The content appears to be about exploiting Server-Side Request Forgery (SSRF) vulnerabilities to gain admin access. It is likely a write-up by Gupta Bless in the field of Information Security (InfoSec). SSRF is a type of security vulnerability that allows an attacker to manipulate the server into making unauthorized requests, potentially leading to unauthorized access. The article may provide insights or techniques on how SSRF can be exploited to gain admin privileges. |
| 2025-08-14 2025 | Full Read SSRF on Gitlab's Internal Grafana intermediate | Program: GitLab Severity: critical Weakness: Server-Side Request Forgery (SSRF) Apparently, Grafana is bundled with Gitlab by default. So the grafana instance that is accessible via `/-/grafana/`is v... → hackerone.com |
| 2025-08-14 2025 | Server side request forgery SSRF beginner | The content discusses Server-Side Request Forgery (SSRF), a vulnerability that allows attackers to manipulate a server into making unintended requests. It explains how SSRF works, its impact on security, and provides examples of SSRF attacks. The article also covers how to prevent SSRF attacks, including input validation, using allowlists, and restricting access to sensitive resources. Additionally, it emphasizes the importance of understanding and mitigating SSRF vulnerabilities to protect systems from potential exploitation. |
| 2025-08-14 2025 | My First Bug: Blind SSRF Through Profile Picture Upload | by swaysthinking intermediate | The content is titled "My First Bug: Blind SSRF Through Profile Picture Upload" by swaysthinking. The main focus is likely on the author's experience discovering a blind Server-Side Request Forgery (SSRF) vulnerability through a profile picture upload feature. This bug allowed unauthorized access to internal systems through manipulating the server's requests. The content may detail the discovery process, the impact of the vulnerability, and possibly the steps taken to report and address the issue. |
| 2025-08-14 2025 | Vimeo SSRF with code execution potential. | by Harsh Jaiswal | InfoSec Writ intermediate | The content discusses a security vulnerability in Vimeo known as Server-Side Request Forgery (SSRF) that could potentially lead to code execution. The vulnerability was identified by Harsh Jaiswal and poses a risk to the platform's security. SSRF allows attackers to manipulate server requests and potentially execute malicious code. This highlights the importance of addressing and patching such vulnerabilities to prevent unauthorized access and protect user data. |
| 2025-08-14 2025 | Story of a 2.5k Bounty — SSRF on Zimbra Led to Dump All Credentials in Clea intermediate | The content discusses a story where a bounty of $2.5k was rewarded for discovering a Server-Side Request Forgery (SSRF) vulnerability on Zimbra. This vulnerability allowed the attacker to dump all credentials in cleartext. The focus is on the impact of the SSRF exploit on Zimbra's security and the importance of addressing such vulnerabilities to prevent unauthorized access to sensitive information. |
| 2025-08-14 2025 | Server_Side_Request_Forgery_Prevention_Cheat_Sheet_SSRF_Bible.pdf beginner | The content is a document titled "Server_Side_Request_Forgery_Prevention_Cheat_Sheet_SSRF_Bible.pdf." It likely contains information and guidelines on preventing server-side request forgery (SSRF) attacks. SSRF is a vulnerability where an attacker can manipulate a server into making unintended requests on their behalf. The document may provide cheat sheets or best practices to help developers protect their systems from SSRF attacks. It could be a valuable resource for understanding and mitigating this security risk. → cheatsheetseries.owasp.org |
| 2025-08-14 2025 | Capital One SSRF | Kontra Application Security Training intermediate | The content appears to mention a topic related to Capital One's Server-Side Request Forgery (SSRF) vulnerability. It may also refer to Kontra Application Security Training, which could be a resource for learning about application security, potentially including how to identify and mitigate SSRF vulnerabilities. The content seems to highlight the importance of understanding and addressing security issues like SSRF to protect sensitive data and systems from potential cyber threats. |
| 2025-08-14 2025 | Exploiting an SSRF: Trials and Tribulations | by A Bug’z Life | A Bug’z Lif intermediate | The content seems to focus on the topic of exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It suggests that the process of exploiting SSRF vulnerabilities can be challenging and may involve various trials and tribulations. The author, identified as A Bug'z Life, likely shares insights, experiences, or techniques related to SSRF exploitation. The content may delve into the complexities and difficulties encountered when attempting to exploit SSRF vulnerabilities. |
| 2025-08-14 2025 | SSRF (Server Side Request Forgery) - HackTricks beginner | The content is about SSRF (Server Side Request Forgery) and is part of the HackTricks series. SSRF is a vulnerability that allows an attacker to make requests on behalf of the server, potentially accessing internal systems or performing malicious actions. The HackTricks series likely provides information on exploiting and defending against SSRF attacks. → book.hacktricks.xyz |
| 2025-08-14 2025 | swisskyrepo/PayloadsAllTheThings: Server Side Request Forgery intermediate 7 min read | Reference detailing Server-Side Request Forgery (SSRF) vulnerabilities, covering methodology, bypass techniques like IPv6 notation and URL encoding, and exploitation paths. It highlights tools such as swisskyrepo/SSRFmap and tarunkant/Gopherus, and discusses bypassing filters using methods like DNS rebinding and URL scheme abuse, including specific examples like fetching AWS metadata and exploiting the gopher:// protocol. |
| 2025-08-14 2025 | SSRF payloads. Payloads with localhost | by Pravinrp | Medium intermediate | The content seems to focus on SSRF (Server-Side Request Forgery) payloads that involve using localhost. It appears to be an article or post written by Pravinrp on Medium. SSRF is a security vulnerability where an attacker can manipulate a web application to make requests on behalf of the server. Using payloads with localhost in SSRF attacks can be a way to exploit the vulnerability. The content likely delves into techniques or examples of how attackers can leverage SSRF with localhost for malicious purposes. |
| 2025-08-14 2025 | GitHub - teknogeek/ssrf-sheriff: A simple SSRF-testing sheriff written in G intermediate 1 min read | Library for testing Server-Side Request Forgery (SSRF) vulnerabilities, written in Go. It supports all HTTP methods and offers configurable secret tokens with content-specific responses in formats like JSON, XML, HTML, TXT, PNG, JPEG, GIF, MP3, and MP4. Secrets are generated per-request, and the library also features TLS support. Inspired by Frans Rosén's talk at BountyCon '19 Singapore, this tool was initially developed for the Uber H1-4420 2019 London Live Hacking Event. |