The newest Server-Side Request Forgery (SSRF) resources are on the Server-Side Request Forgery (SSRF) page. For a reading order instead of a date order, see the Server-Side Request Forgery (SSRF) learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2025-01-24 2025 | Check out this article to learn how to find and exploit server-side request forgery (SSRF) vulnerabilities in an API. intermediate | The article provides guidance on identifying and exploiting server-side request forgery (SSRF) vulnerabilities in an API. It offers insights into detecting and leveraging these vulnerabilities for potential exploitation. The focus is on understanding SSRF risks and how they can be manipulated to compromise server security. The article aims to educate readers on the significance of addressing SSRF vulnerabilities to enhance API security. It is recommended for those interested in API hacking and SSRF mitigation strategies. |
| 2025-01-23 2025 | SSRF 101! Don't let attackers turn your server into a proxy! Learn the basics of Server-Side Request Forgery and how to prevent it from happening to you! #SSRF #CyberSecurity #WebSecurity beginner | The content emphasizes the importance of understanding Server-Side Request Forgery (SSRF) to prevent attackers from exploiting it to turn a server into a proxy. It encourages learning the basics of SSRF to enhance cybersecurity and web security. The post aims to raise awareness about SSRF risks and the measures to mitigate them. #SSRF #CyberSecurity #WebSecurity. |
| 2025-01-23 2025 | Warning! Server-Side Request Forgery (SSRF) attacks can trick your server into making unauthorized requests! Validate user input use whitelisting & monitor logs to stay safe! #SSRF #CyberSecurity #WebSecurity beginner | The content warns about Server-Side Request Forgery (SSRF) attacks that manipulate servers into making unauthorized requests. To prevent SSRF attacks, it advises validating user input, implementing whitelisting, and monitoring logs. These measures enhance cybersecurity and web security. It emphasizes the importance of safeguarding servers against SSRF attacks by taking proactive security measures. |
| 2025-01-20 2025 | Day 15: XXE SSRF! Discovered how XXE can lead to SSRF allowing attackers to access internal systems or sensitive data. Always validate XML input and disable external entities! #BugBounty #XXE #SSRF #CyberSecurity #InfoSec https://t.co/UspwIegXyp intermediate | The content discusses the discovery of how XXE (XML External Entity) vulnerabilities can lead to SSRF (Server-Side Request Forgery), enabling attackers to access internal systems or sensitive data. It emphasizes the importance of validating XML input and disabling external entities to prevent such attacks. The post also includes hashtags related to Bug Bounty, XXE, SSRF, Cybersecurity, and InfoSec. |
| 2025-01-18 2025 | : A Deep Dive into and Mitigations for and advanced | The content explores Server-Side Request Forgery (SSRF) cyber risks for software and web developers, providing a deep dive into the topic. It emphasizes the importance of understanding SSRF vulnerabilities and offers mitigations to address these risks. The focus is on enhancing security measures to protect against SSRF attacks, aiming to assist developers in safeguarding their systems and applications. |
| 2025-01-18 2025 | : A Deep Dive into and Mitigations for and beginner | The content discusses Server-Side Request Forgery (SSRF), highlighting cyber risks it poses to software and web developers. It delves into the importance of understanding and mitigating SSRF vulnerabilities to enhance security. The post provides insights and strategies for developers to secure their systems against SSRF attacks. It emphasizes the need for developers to be vigilant and proactive in addressing SSRF risks to protect their software and websites from potential exploitation. The content aims to raise awareness about SSRF vulnerabilities and offers guidance on how developers can safeguard their systems. |
| 2025-01-17 2025 | Remember: #SSRF isn't just about making HTTP calls! Think broader - SMTP enumeration Redis unauthorized access internal Kibana instances Jenkins panels. The internal network is full of sensitive services! #BugBounty #HackingTips #CyberSecurity beginner | The content emphasizes that Server-Side Request Forgery (#SSRF) extends beyond HTTP calls to include SMTP enumeration, unauthorized access to Redis, internal Kibana instances, and Jenkins panels. It highlights the presence of sensitive services within internal networks, urging a broader perspective for identifying vulnerabilities. The post is tagged with #BugBounty, #HackingTips, and #CyberSecurity. |
| 2025-01-17 2025 | Advanced #SSRF tip: Use Time-Based Blind SSRF to map internal networks. Send requests to sequential IPs/ports and measure response times. Tools like SSRFmap can automate this process. #PenTesting #RedTeam #InfoSec intermediate | The content discusses using Time-Based Blind SSRF to map internal networks by sending requests to sequential IPs/ports and measuring response times. Tools like SSRFmap can automate this process, beneficial for penetration testing, red team activities, and information security. This advanced technique helps identify vulnerabilities and potential entry points in network security. |
| 2025-01-17 2025 | Defending against #SSRF in microservices? Network segmentation is crucial! Use service mesh policies strict egress controls and never trust traffic between services. Monitor inter-service communication patterns. #DevSecOps #Kubernetes #Security intermediate | To defend against Server-Side Request Forgery (#SSRF) in microservices, network segmentation is vital. Implement strict egress controls, service mesh policies, and avoid trusting traffic between services. Monitoring inter-service communication patterns is essential. Emphasizing DevSecOps practices, Kubernetes, and security measures can enhance protection against SSRF attacks in microservices architecture. |
| 2025-01-16 2025 | Discovered an #SSRF but facing restrictions? Try CRLF injection in HTTP headers race conditions in URL validation or DNS rebinding attacks. Sometimes the initial SSRF is just the start! #BugBounty #HackingTips #WebSecurity intermediate | The content discusses strategies to overcome restrictions when facing a Server-Side Request Forgery (SSRF) vulnerability. It suggests using techniques like CRLF injection in HTTP headers, exploiting race conditions in URL validation, or conducting DNS rebinding attacks. It emphasizes that an SSRF issue can be just the beginning of a larger security threat. The post also includes hashtags related to bug bounty programs, hacking tips, and web security. |
| 2025-01-16 2025 | Hunting for #SSRF in modern web apps? Check GraphQL introspection endpoints PDF generators webhook configurations and image proxy functionality. These features often process user-supplied URLs! #BugBountyTips #WebHacking intermediate | The content highlights hunting for Server-Side Request Forgery (#SSRF) in modern web apps by checking GraphQL introspection endpoints, PDF generators, webhook configurations, and image proxy functionality. These features frequently handle user-supplied URLs, making them potential targets for SSRF vulnerabilities. The post also includes hashtags like #BugBountyTips and #WebHacking, indicating it is aimed at security researchers or bug bounty hunters. It suggests focusing on these specific areas to identify and potentially exploit SSRF vulnerabilities in web applications. |
| 2025-01-16 2025 | Critical #SSRF via AWS IMDSv1: If you can hit 169.254.169.254 you might grab IAM creds & own the cloud infrastructure. Always enforce IMDSv2 with required HTTP PUT header token! #CloudSecurity #AWS #AWSecurity intermediate | The content warns about a critical Server-Side Request Forgery (SSRF) vulnerability via AWS IMDSv1, allowing attackers to access IAM credentials and compromise cloud infrastructure by targeting 169.254.169.254. To mitigate this risk, it is advised to enforce IMDSv2 with a required HTTP PUT header token. This emphasizes the importance of implementing proper security measures, especially in cloud environments like AWS, to prevent unauthorized access and protect sensitive information. #CloudSecurity #AWS #AWSecurity. |
| 2025-01-16 2025 | Understanding #SSRF defense in depth: Input validation isn't enough! Implement allowlists DNS resolution controls egress filtering and disable unused URL schemas. Remember: 302 redirects can bypass simple hostname checks. #AppSec #SecurityEngineering intermediate | The content emphasizes the importance of a comprehensive defense strategy against Server-Side Request Forgery (SSRF). It highlights that relying solely on input validation is insufficient. Suggestions include implementing allowlists, DNS resolution controls, egress filtering, and disabling unused URL schemas to enhance security. Additionally, it warns that 302 redirects can circumvent basic hostname checks. The post underscores the significance of a multi-layered approach to SSRF defense to bolster application security. |
| 2025-01-16 2025 | Pro tip: When testing for #SSRF don't just try localhost/127.0.0.1. Remember IPv6 (::1) decimal notation (2130706433) octal format (0177.0.0.1) and domain shortcuts (127.1). Cloud metadata endpoints are gold! #HackingTips #CloudSecurity intermediate | The content provides a tip for testing Server-Side Request Forgery (SSRF) vulnerabilities by exploring various formats beyond localhost/127.0.0.1, including IPv6 (::1), decimal notation (2130706433), octal format (0177.0.0.1), and domain shortcuts (127.1). It emphasizes the importance of considering cloud metadata endpoints for potential exploitation. The post also includes hashtags related to hacking tips and cloud security. |
| 2025-01-15 2025 | Blind #SSRF vulnerabilities can be detected by monitoring response times & using out-of-band techniques like DNS/HTTP callbacks. Set up a Burp Collaborator or interactsh server to catch those internal network calls. #InfoSec #BugBounty #WebSecurity intermediate | Blind SSRF vulnerabilities can be identified by monitoring response times and utilizing out-of-band techniques like DNS/HTTP callbacks. Setting up a Burp Collaborator or interactsh server can help capture internal network calls. This approach enhances information security, aids in bug bounty programs, and strengthens web security measures. |
| 2025-01-15 2025 | Our October webinar, "Find & Fix: How Common Code Flaws Let Hackers In, &How You Keep Them Out" is now available on-demand! beginner | The October webinar titled "Find & Fix: How Common Code Flaws Let Hackers In, & How You Keep Them Out" is now available on-demand. The webinar focuses on cybersecurity, web application security, SSRF, AppSec, code flaws, vulnerability management, and security testing. It provides insights on identifying and addressing common code vulnerabilities to enhance security measures. The webinar aims to educate viewers on preventing hackers from exploiting code flaws. Viewers can access the webinar at the provided link. #Cybersecurity #Webinar #SecurityTesting #CodeFlaws #VulnerabilityManagement |
| 2025-01-15 2025 | Looking for ways to escalate: Potential for internal resource access or DNS exfiltration? Any creative payload ideas or exploitation techniques? DM or reply with insights! #BugBounty #SSRF #Infosec #EthicalHacking 2/N intermediate | The content is seeking ways to escalate by exploring potential for internal resource access or DNS exfiltration. It asks for creative payload ideas or exploitation techniques related to Bug Bounty, SSRF, Infosec, and Ethical Hacking. The invitation is to share insights via direct message or reply. The focus is on finding vulnerabilities and enhancing security measures. |
| 2025-01-12 2025 | Quick and dirty way to find parameters vulnerable to LFI & Path Traversal & SSRF & Open Redirect: Burp Search Regex \?.=(\/\/?\w|\w\/|\w(%3A|:)(\/|%2F)|%2F|[\.\w]\.\w{24}[\w]) And find potentially vulnerable SSRF params - https://t.co/6cfBPVn0FM #SSRF #cybersec https://t.co/ipnHHHaID4 intermediate | The content discusses a method using Burp Search Regex to identify parameters vulnerable to LFI, Path Traversal, SSRF, and Open Redirect. The provided regex pattern helps in finding potentially vulnerable SSRF parameters. The focus is on cybersecurity, specifically SSRF vulnerabilities. The content includes a link for further reference. |
| 2025-01-09 2025 | Automated SSRF Detection! #BugBounty #SSRF #Regex #bugbountytips #burpsuite Prepare for success: 1 Use a DNS log platform (e.g. Burp Collaborator or https://t.co/UiHRbhDCC8). 2 Ready these regex patterns: intermediate | The content discusses automated SSRF detection for bug bounty programs, emphasizing the use of a DNS log platform like Burp Collaborator and specific regex patterns. It suggests preparing for success by utilizing these tools and resources to enhance SSRF vulnerability detection. The post also includes relevant hashtags and a link to regex patterns for reference. |
| 2025-01-08 2025 | 403 Bypass list by @jhaddix Url Manipulation Methods Top 77 ways to bypass access control #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #ssrf #AEM https://t.co/WWzARH89rF intermediate | The content discusses a list of 77 URL manipulation methods to bypass access control, shared by @jhaddix. It is related to bug bounty tips, ethical hacking, cybersecurity, pentesting, SQL injection (SQLi), cross-site scripting (XSS), cybersecurity awareness, server-side request forgery (SSRF), and Adobe Experience Manager (AEM). The link provided leads to more detailed information on these methods. |
| 2025-01-08 2025 | 🎯 **Find SSRF Bypass, Cloudflare & AWS Metadata!** intermediate | The content discusses finding Server-Side Request Forgery (SSRF) bypass methods, accessing Cloudflare and AWS metadata. The author, AnonTriager, shares insights on cybersecurity, bug bounty hunting, and provides additional tips. The content includes links for further reading. Key topics covered are SSRF, Cloudflare, AWS, cybersecurity, and bug bounty programs. |
| 2025-01-06 2025 | Step 5: Test SSRF Surf: surf -l ssrf.txt -t 10 -c 200 SSRF Finder: cat ssrf.txt intermediate | Step 5 involves testing SSRF Surf using the command "surf -l ssrf.txt -t 10 -c 200" and checking the results with "SSRF Finder: cat ssrf.txt". This step is part of a process to identify and address Server-Side Request Forgery (SSRF) vulnerabilities. The provided link may contain additional information related to this process. |
| 2025-01-06 2025 | Escalating HTML to SSRF Check out how HTML injection leads to SSRF. Fast testing = HOF in 5 minutes! Learn more: https://t.co/1vrLROS3zh Written by cyber_catz. #BugBounty #Infosec #CyberSecurity #SSRF #Hacking intermediate | The content discusses escalating HTML injection to Server-Side Request Forgery (SSRF) and how it can be tested quickly for potential vulnerabilities. The article is written by cyber_catz and provides a link for further information. It highlights the connection between HTML injection and SSRF, emphasizing the importance of fast testing. The post is relevant to Bug Bounty, Infosec, Cybersecurity, SSRF, and Hacking. |
| 2025-01-05 2025 | SSRF beginner | The content is about Server-Side Request Forgery (SSRF) in web hacking and penetration testing. It includes a video link for more information on SSRF and related topics like web fundamentals, cybersecurity, ethical hacking, and bug bounty tips. The content is in Tamil and is part of a tutorial series on TryHackMe, covering web application security, penetration testing, and CTF challenges. The link provided directs to additional resources on SSRF and its implications in information security and web application security testing. |
| 2025-01-04 2025 | Vulnerabilidades XXE (XML eXternal Entity injection) y contramedidas beginner | The content discusses XXE (XML eXternal Entity) injection vulnerabilities and countermeasures. It highlights the importance of protecting against XML external entity injections to prevent security breaches. The post likely provides insights into how these vulnerabilities can be exploited and offers strategies or tools to mitigate the risks associated with XXE attacks. It also mentions the relevance of SSRF (Server-Side Request Forgery) in this context. |
| 2025-01-03 2025 | What is an SSRF attack...and why do we care? 🤔 beginner | The content discusses SSRF attacks, explaining what they are, how to identify them, and the importance of trust relationships in preventing them. It provides a video link for further details on SSRF attacks, vulnerability, secure coding, and application security. The focus is on understanding SSRF attacks and their significance in maintaining secure systems. |
| 2025-01-02 2025 | Invoice Ninja suffers from a Server-Side Request Forgery flaw news | Invoice Ninja has been identified as having a Server-Side Request Forgery vulnerability. This flaw could potentially allow attackers to manipulate server requests, leading to unauthorized access or data leakage. It is crucial for users of Invoice Ninja to be aware of this security issue and take necessary precautions to mitigate the risk of exploitation. |
| 2025-01-01 2025 | Server-Side Request Forgery - Simple Illustration beginner | The content discusses Server-Side Request Forgery (SSRF) through a simple illustration. It is shared by @hackhunting and includes hashtags like #ssrf, #bugbountytips, and #webapplicationsecurity. The post likely provides insights or tips related to identifying and addressing SSRF vulnerabilities in web applications. |
| 2024-12-31 2024 | GitHub - hackerassociate/SSRF-Hacks-IP-Decimal: A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad Shah. intermediate 1 min read Burp | Extension that automatically converts IPv4 addresses to decimal notation, integrated into Burp Suite's context menu. This tool aids security professionals in bypassing Web Application Firewalls (WAFs) and testing Server-Side Request Forgery (SSRF) vulnerabilities by replacing standard IP formats with their decimal equivalents, logging all conversions in real-time. |
| 2024-12-30 2024 | Exploring vulnerabilities? This Cloud Metadata Dictionary by is a must-have! intermediate | The Cloud Metadata Dictionary by @Jhaddix is recommended for exploring SSRF vulnerabilities and testing metadata services in cloud environments. It is considered a valuable resource for cybersecurity professionals and bug bounty hunters. The dictionary can aid in identifying and addressing security issues related to cloud metadata services. The post emphasizes the importance of this tool in enhancing cybersecurity practices and staying vigilant against potential vulnerabilities. |
| 2024-12-29 2024 | How to find SSRF, Bypass Cloudflare, and extract AWS metadata intermediate Bug Bounty | I was working on a program and since I have no permission to disclose the name of the target, let’s call it redacted.com. |
| 2024-12-26 2024 | :) beginner | The content consists of a link and a hashtag related to SSRF (Server-Side Request Forgery). The link provided may lead to more information about SSRF. The use of the smiley face emoticon in the title and the hashtag suggests a positive or light-hearted tone. The content also includes a shortened link that redirects to an external source, possibly for further reading or resources on SSRF. |
| 2024-12-16 2024 | socalledhacker: Read SSRF: Blacklist and Whitelist-Based Input Filters by Neetrox on Medium: #bugbountytips #bugbounty #bugbountytip #bughunting #hacking #SSRF #infosec #cybersecurity #security intermediate | The content is a tweet promoting an article on Medium titled "SSRF: Blacklist and Whitelist-Based Input Filters" by Neetrox. The article likely discusses strategies for preventing Server-Side Request Forgery (SSRF) attacks using input filters. The tweet includes hashtags related to bug bounty tips, hacking, cybersecurity, and security. The tweet is shared by the user socalledhacker. |
| 2024-12-16 2024 | socalledhacker: Don't want to use Burpsuite collaborator for SSRF hunting... Check this out an amazing replacement of collaborator:- #bugbounty #bug #bugbountytip #bugbountytips @cybersecurity #infosec #SSRF intermediate | The content shared by socalledhacker discusses an alternative to using Burpsuite collaborator for SSRF hunting. The post highlights a replacement tool and encourages users to explore it. The hashtags used indicate the focus on bug bounty, cybersecurity, infosec, and SSRF. The post is shared on Twitter by socalledhacker. |
| 2024-12-14 2024 | ImShaadab: Just wrapped up the SSRF room on @RealTryHackMe! Turns out servers will believe anything you tell them if you phrase it right Always validate your inputs folks! #TryHackMe #SSRF #CyberSecurity beginner | ImShaadab completed the SSRF room on TryHackMe, highlighting that servers can be tricked if inputs are not validated properly. The importance of validating inputs in cybersecurity is emphasized. #TryHackMe #SSRF #CyberSecurity |
| 2024-12-13 2024 | @st3am3dric31: Wrote a beginners guide to testing a web app for Server Side Request Forgery vulnerabilities #ssrf #webhacking #bugbounty #oswa beginner | @st3am3dric31 shared a beginner's guide on testing web apps for Server Side Request Forgery (SSRF) vulnerabilities. The guide focuses on #ssrf, #webhacking, #bugbounty, and #oswa. It can be found on Twitter at the provided link. |
| 2024-12-11 2024 | omvapt: #SAP fixed critical #SSRF #Vulnerabilities #flaw in #NetWeavers #Adobe_Document Services news | SAP addressed critical SSRF vulnerabilities in NetWeaver's Adobe Document Services, as reported by omvapt on Twitter. The flaws were fixed to enhance security and prevent potential exploitation. |
| 2024-12-10 2024 | SAP fixed critical SSRF flaw in NetWeaver NetWeaver news 1 min read | Analysis of SAP's December 2024 Security Patch Day, addressing 16 vulnerabilities including critical SSRF (CVE-2024-47578) in NetWeaver's Adobe Document Service, which allows file manipulation or system unavailability. Other fixed issues include CVE-2024-47579, CVE-2024-47580, XSS (CVE-2024-47590) in Web Dispatcher, and RFC Information Disclosure (CVE-2024-54198) in SAP NetWeaver Application Server ABAP. → securityaffairs.com |
| 2024-12-10 2024 | SAP Patches Critical Vulnerability in NetWeaver news 2 min read | Writeup detailing SAP's December 2024 Security Patch Day, which includes nine new and four updated security notes. A critical Server-Side Request Forgery (SSRF) vulnerability, CVE-2024-47578, in NetWeaver AS for JAVA (Adobe Document Services) allows for full system compromise. Medium-severity flaws CVE-2024-47579 and CVE-2024-47580 permit file reading. Additionally, CVE-2024-54198, an authenticated information disclosure bug in NetWeaver, can be exploited via manipulated Remote Function Call (RFC) requests to gain sensitive credentials. Other addressed vulnerabilities include SSRF, XSS, and NULL pointer dereference. → securityweek.com |
| 2024-12-10 2024 | JayateerthaG: [New Blog Alert - ] #bugbounty #bugbountytips #hackers #blog #ssrf #lfi #vulnerability #zoho #jayateerthag #infosec #security intermediate | JayateerthaG has a new blog post alert related to bug bounty tips, hackers, SSRF, LFI, Zoho, infosec, and security. The tweet provides a link to the blog post. |
| 2024-12-08 2024 | @DanaEpp: Check out this article to learn how to find and exploit server-side request forgery (SSRF) vulnerabilities in an API. #apihacking #ssrf intermediate | The content shared by @DanaEpp on Twitter highlights an article focusing on identifying and exploiting server-side request forgery (SSRF) vulnerabilities within an API. The post encourages readers to explore the article for insights into API hacking and SSRF. The link provided directs users to the source for further information on this topic. |
| 2024-12-08 2024 | @pentesttesting: I just published Server-Side Request Forgery (SSRF) in Laravel: Understanding and Mitigation #LaravelSecurity #CyberSecurity #WebSecurity #SSRF #LaravelTips #PenetrationTesting #VulnerabilityAssessment #WebsiteSecurity #EthicalHacking #CyberAwareness intermediate | The content shared on Twitter discusses Server-Side Request Forgery (SSRF) in Laravel, focusing on understanding and mitigation strategies. It touches on topics like Laravel security, cybersecurity, web security, SSRF, penetration testing, vulnerability assessment, website security, ethical hacking, and cyber awareness. The link provided likely leads to a detailed article or guide on SSRF in Laravel. |
| 2024-12-06 2024 | @KahuLabs_: Case Study Alert! Our team at Kahu Labs recently uncovered a critical SSRF vulnerability that escalated into XSS in a clients web app. This flaw bypassed WAF protections allowing malicious SVG files to be loaded and executed. Heres how it happened #CyberSecurity #SSRF advanced | Kahu Labs discovered a serious SSRF vulnerability that led to XSS in a client's web app, bypassing WAF protections. Malicious SVG files could be loaded and executed. The case study highlights the vulnerability escalation and the impact on cybersecurity. #CyberSecurity #SSRF. |
| 2024-12-05 2024 | ReneRobichaud: ChatGPT Next Web Vulnerability Let Attackers Exploit Endpoint to Perform SSRF #Infosec #Security #Cybersecurity #CeptBiro #ChatGPT #NextWeb #Vulnerability #Exploit #Endpoint #SSRF news | The content discusses a vulnerability in ChatGPT Next Web discovered by ReneRobichaud, allowing attackers to exploit endpoints for Server-Side Request Forgery (SSRF). The post highlights the importance of cybersecurity and provides hashtags related to information security. The vulnerability could potentially be used by attackers to manipulate the endpoint and perform SSRF attacks. The link provided leads to a tweet by ReneRobichaud discussing this issue. |
| 2024-12-05 2024 | CeptBiro: ChatGPT Next Web Vulnerability Let Attackers Exploit Endpoint to Perform SSRF #Infosec #Security #Cybersecurity #CeptBiro #ChatGPT #NextWeb #Vulnerability #Exploit #Endpoint #SSRF news | The content discusses a vulnerability in ChatGPT Next Web, allowing attackers to exploit endpoints for Server-Side Request Forgery (SSRF). CeptBiro shared this information on Twitter, emphasizing the importance of cybersecurity and the need to address this vulnerability to prevent potential attacks. The post includes relevant hashtags such as #Infosec, #Security, and #Cybersecurity to raise awareness about the issue. |
| 2024-12-02 2024 | CWISociety: New #CWISmemberresearch by #CWISmember Dr Hon Lok (David) Lo team regarding minimally invasive #SSRF techniques! Read more below: advanced | Dr. Hon Lok (David) Lo and his team, members of CWISociety, have conducted new research on minimally invasive SSRF techniques. The details of their research can be found on the CWISociety Twitter page. |
| 2024-11-29 2024 | iototsecnews: Wget の脆弱性 CVE-2024-10524 が FIX短縮 URL による SSRF 攻撃の可能性 #GNU #JFrog #OpenSource #SSRF #Vulnerability #wget news | The content discusses a vulnerability (CVE-2024-10524) in Wget that could lead to SSRF attacks via shortened URLs. The post highlights the potential risk and mentions relevant hashtags like #GNU, #JFrog, #OpenSource, #SSRF, #Vulnerability, and #wget. The source of the information is a tweet from iototsecnews. |
| 2024-11-28 2024 | salecharohit: Enhance AWS security by enforcing IMDSv2 with Open Policy Agent (OPA) in Terraform! Protect your instance metadata and reduce unauthorized access risks through #SSRF Learn more: #AWS #OpenPolicyAgent #CloudSecurity #IMDSv2 intermediate | The content discusses enhancing AWS security by enforcing IMDSv2 with Open Policy Agent (OPA) in Terraform to protect instance metadata and reduce unauthorized access risks, particularly against Server-Side Request Forgery (SSRF) attacks. The post encourages learning more about this security measure through the provided link. The focus is on utilizing IMDSv2, OPA, and Terraform to bolster AWS security and safeguard against potential vulnerabilities. The hashtags used include #AWS, #OpenPolicyAgent, #CloudSecurity, and #IMDSv2. |
| 2024-11-27 2024 | InfoSecComm: New Writeup Alert! "SSRF To Internal Data Access Via PDF Print Feature" by Bishal Shrestha is now live on IW! Check it out here: #ssrf #bugbounty #informationsecurity intermediate | A new writeup titled "SSRF To Internal Data Access Via PDF Print Feature" by Bishal Shrestha is now available on InfoSecComm. The content discusses a security vulnerability related to SSRF that allows access to internal data through the PDF print feature. The post is live on IW and can be viewed using the provided link. It covers topics related to #ssrf, #bugbounty, and #informationsecurity. |
| 2024-11-26 2024 | @bishal0x01: My first-ever SSRF report to Internal Data Access. Feel free to share any feedback! Thanks to @dhungana_bibek7 @tnirmalz for proofreading! #bugbounty #ssrf intermediate | The content is a tweet by user @bishal0x01 sharing their first SSRF report on Internal Data Access. They invite feedback and credit @dhungana_bibek7 and @tnirmalz for proofreading. The tweet includes hashtags #bugbounty and #ssrf. The tweet can be found at https://twitter.com/bishal0x01/status/1861088498033275039. |