The newest Server-Side Request Forgery (SSRF) resources are on the Server-Side Request Forgery (SSRF) page. For a reading order instead of a date order, see the Server-Side Request Forgery (SSRF) learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2023-01-29 2023 | SSRFire - an automated SSRF finder beginner | SSRFire is an automated tool designed for finding Server-Side Request Forgery (SSRF) vulnerabilities. It helps identify potential security weaknesses in web applications that could be exploited by attackers. By automating the process of detecting SSRF flaws, SSRFire aims to enhance the security of web applications and prevent unauthorized access to sensitive data or resources. The tool can be a valuable asset for security professionals and developers looking to proactively address SSRF vulnerabilities in their applications. |
| 2023-01-23 2023 | Server-Side Request Forgery (SSRF) | Common Attacks & Risks | Imperva beginner 7 min read | Guide to Server-Side Request Forgery (SSRF) attacks, detailing how attackers leverage application functionality to access internal data and services. It covers risks like data exposure (e.g., Amazon EC2 instance credentials via 169.254.169.254), reconnaissance of internal networks, port scans (Cross-Site Port Attacks), denial of service, and remote code execution, particularly against services like Redis. The guide differentiates between server-side and back-end SSRF, emphasizing that while blacklists are often ineffective, whitelisting IP addresses/DNS names and disabling unused URL schemas are key mitigation strategies. → imperva.com |
| 2023-01-23 2023 | What is SSRF (Server-side request forgery)? Tutorial & Examples | Web Security Academy beginner 7 min read | Tutorial on Server-Side Request Forgery (SSRF) detailing how attackers can manipulate server applications to make unintended requests. This vulnerability allows access to internal services, sensitive data like authorization credentials, or even arbitrary command execution. The tutorial covers common SSRF attacks targeting the server's loopback interface (e.g., using `127.0.0.1` or `localhost`) and other back-end systems with non-routable IP addresses. It also demonstrates techniques for circumventing blacklist and whitelist-based SSRF defenses, including alternative IP representations, domain registration, URL encoding, and exploiting URL parsing features like credentials, fragments, and DNS hierarchy. → portswigger.net |
| 2022-10-13 2022 | Hey man if I talk about the impact it is comparatively low than that of normal ssrf because of its intermediate | The content discusses the impact of a specific type of vulnerability called Server-Side Request Forgery (SSRF), noting that its impact is relatively low compared to a typical SSRF. The post seems to imply that this particular SSRF vulnerability may have less severe consequences than others. |
| 2022-10-13 2022 | Server-Side Request Forgery (SSRF)- PortSwigger Labs beginner | The content discusses Server-Side Request Forgery (SSRF) as presented by PortSwigger Labs. SSRF is a vulnerability that allows attackers to manipulate a server into making requests on their behalf. This can lead to unauthorized access to internal systems, data theft, or server exploitation. Understanding SSRF is crucial for developers and security professionals to prevent such attacks and secure their systems. The link provided likely offers further details or resources on SSRF from PortSwigger Labs. |
| 2022-10-13 2022 | Lets Understand SSRF vulnerability beginner | The content discusses the SSRF (Server-Side Request Forgery) vulnerability, which is a type of security issue where an attacker can manipulate a web application to make unauthorized requests on behalf of the server. SSRF can lead to data breaches, server exploitation, and even full system compromise. Understanding SSRF vulnerabilities is crucial for developers and security professionals to prevent such attacks and protect sensitive data. It is important to implement proper security measures and validate user input to mitigate the risks associated with SSRF vulnerabilities. |
| 2022-10-13 2022 | Exploiting XXE for SSRF intermediate | The content discusses exploiting XML External Entity (XXE) vulnerabilities to achieve Server-Side Request Forgery (SSRF) attacks. By manipulating XML input, attackers can trigger the server to make unintended requests to internal resources, potentially leading to data leakage or unauthorized access. This technique leverages the server's ability to parse XML data and can be used to bypass security measures. Understanding and mitigating XXE vulnerabilities is crucial to prevent SSRF attacks and protect sensitive information. |
| 2022-10-13 2022 | Top 25 Server-Side Request Forgery (SSRF) Bug Bounty Reports beginner | The content discusses the top 25 Server-Side Request Forgery (SSRF) Bug Bounty Reports. It likely highlights significant instances where SSRF vulnerabilities were discovered and reported through bug bounty programs. SSRF is a type of security vulnerability that allows attackers to manipulate server requests, potentially leading to unauthorized access or data leakage. The bug bounty reports likely showcase the impact and severity of SSRF vulnerabilities in various systems and emphasize the importance of addressing such issues to enhance cybersecurity. → corneacristian.medium.com |
| 2022-10-13 2022 | AWS internal metadata accessed through SSRF by Chaining an Open Redirect bug advanced | The content discusses a security vulnerability where AWS internal metadata was accessed through Server-Side Request Forgery (SSRF) by exploiting an Open Redirect bug. This vulnerability allowed unauthorized access to sensitive AWS information. The method involved chaining the SSRF vulnerability with the Open Redirect bug to gain access to internal metadata. This highlights the importance of addressing and fixing such vulnerabilities to prevent unauthorized access to critical information stored on AWS servers. |
| 2022-10-13 2022 | SSRF payloads intermediate | The content mentions SSRF payloads, which are used in exploiting Server-Side Request Forgery vulnerabilities. These payloads can be utilized to manipulate servers into making requests to unintended destinations, potentially leading to data breaches or unauthorized access. It is crucial for developers to be aware of SSRF vulnerabilities and implement proper security measures to prevent such attacks. |
| 2022-10-13 2022 | Escalating SSRF to Accessing all user PII information by aws metadata intermediate | The content discusses a security vulnerability known as Server-Side Request Forgery (SSRF) being exploited to access all user Personally Identifiable Information (PII) through AWS metadata. This escalation highlights the potential risks associated with SSRF attacks and the importance of securing AWS configurations to prevent unauthorized access to sensitive data. The content likely provides insights on how attackers can leverage SSRF vulnerabilities to gain access to valuable information stored within AWS environments, emphasizing the need for robust security measures to protect against such threats. |
| 2022-10-13 2022 | Blind SSRF - The Hide & Seek Game intermediate | The content discusses Blind Server-Side Request Forgery (SSRF) attacks, where attackers manipulate a server into making requests on their behalf without the server's knowledge. This technique can be used to access sensitive information or exploit vulnerabilities. The article likely delves into the challenges of detecting and preventing Blind SSRF attacks, highlighting the need for robust security measures to safeguard against this threat. |
| 2022-10-13 2022 | Chaining an Blind SSRF bug to Get an RCE intermediate | The content discusses the process of exploiting a Blind Server-Side Request Forgery (SSRF) vulnerability to achieve Remote Code Execution (RCE). By chaining these vulnerabilities, attackers can manipulate the server to execute arbitrary commands, potentially leading to unauthorized access and control over the system. This technique involves leveraging SSRF to interact with internal resources and ultimately escalate privileges to execute malicious code remotely. It highlights the importance of addressing and patching SSRF vulnerabilities to prevent such attacks and protect systems from exploitation. |
| 2022-10-13 2022 | How Github recon help me to find NINE FULL SSRF Vulnerability with AWS metadata access intermediate | The content discusses how utilizing Github reconnaissance techniques helped the author discover nine significant Server-Side Request Forgery (SSRF) vulnerabilities that provided access to AWS metadata. The vulnerabilities were likely identified through searching Github repositories for sensitive information or misconfigurations that could be exploited. The findings highlight the importance of conducting thorough security assessments and utilizing tools like Github recon to identify and address potential vulnerabilities in systems that could lead to unauthorized access or data breaches. |
| 2022-10-13 2022 | Intro to SSRF beginner | The content is an introduction to Server-Side Request Forgery (SSRF) provided via a link. SSRF is a type of web vulnerability where an attacker can manipulate a server into making unintended requests on their behalf. This can lead to unauthorized access to internal systems, data leaks, or even server exploitation. Understanding SSRF is crucial for web security professionals to prevent such attacks and protect sensitive data. The link likely provides more in-depth information on SSRF and its implications for web security. |
| 2022-10-13 2022 | The journey of Web Cache Firewall Bypass to SSRF to AWS credentials compromise! intermediate | The content discusses a progression from bypassing web cache and firewalls to exploiting Server-Side Request Forgery (SSRF) vulnerabilities, ultimately leading to compromising AWS credentials. The journey highlights the potential security risks associated with these vulnerabilities and the importance of securing systems against such attacks. |
| 2022-10-13 2022 | Vimeo upload function SSRF intermediate | The content mentions a security vulnerability related to Vimeo's upload function known as Server-Side Request Forgery (SSRF). This vulnerability could potentially allow attackers to manipulate the server into making unauthorized requests on their behalf. It is important for Vimeo to address and patch this vulnerability to prevent potential exploitation by malicious actors. |
| 2022-10-13 2022 | Just Gopher It: Escalating a Blind SSRF to RCE for $15k intermediate | The content discusses escalating a blind Server-Side Request Forgery (SSRF) vulnerability to Remote Code Execution (RCE) for a reward of $15,000. The method used involves exploiting the SSRF vulnerability to access internal services, then leveraging it to execute code on the server. The process is detailed in the content, highlighting the steps taken to turn a lower-level security issue into a critical RCE vulnerability. The article likely provides insights into the technical aspects of the exploit, the challenges faced, and the rewards reaped for successfully escalating the vulnerability. |
| 2022-10-13 2022 | Bypassing SSRF Protection intermediate | The content discusses the topic of bypassing Server-Side Request Forgery (SSRF) protection measures. SSRF is a vulnerability that allows attackers to send crafted requests from a server, potentially leading to unauthorized access or data leakage. By bypassing SSRF protection, attackers can circumvent security controls and exploit vulnerabilities in web applications. The article likely provides insights, techniques, or examples of how attackers can evade SSRF protection mechanisms to carry out malicious activities. It emphasizes the importance of implementing robust security measures to prevent SSRF attacks and safeguard sensitive data. |
| 2022-10-13 2022 | Vimeo SSRF with code execution potential. intermediate | The content discusses a security vulnerability in Vimeo known as Server-Side Request Forgery (SSRF) with the potential for code execution. The vulnerability could allow attackers to manipulate server requests and potentially execute malicious code. The link provided likely leads to more detailed information about this security issue. It is crucial for Vimeo to address and patch this vulnerability to prevent exploitation by malicious actors. |
| 2022-10-12 2022 | SSRF (Server Side Request Forgery) testing resources beginner 1 min read | Library of SSRF testing resources, including payloads leveraging port padding, status codes 300-308, filetypes like JPG and JSON, and various URL encoding techniques. It also features tools and scripts for DNS rebinding exploitation, such as `dref`, and a Python script `ip.py` for testing IP addresses, alongside a proxy for tunneling HTTP communications through SSRF-vulnerable servers. Examples demonstrate bypasses through IPv6, custom 30x redirects, and IP address obfuscation. |
| 2022-10-12 2022 | Server-Side Request Forgery beginner 7 min read | Library detailing Server-Side Request Forgery (SSRF) vulnerabilities, covering methodologies for bypassing filters like IPv6 notation, domain redirects, CIDR, rare addresses, encoded IPs, DNS rebinding, and URL parsing discrepancies. It showcases techniques for exploiting SSRF to access cloud metadata, leak files, perform network discovery, and achieve Remote Command Execution using tools such as swisskyrepo/SSRFmap, tarunkant/Gopherus, and Horlad/r3dir. Examples of common bypasses and specific exploits like using the `jar:` scheme or the `gopher://` protocol are provided, along with numerous IP obfuscation methods. |
| 2022-10-12 2022 | Multiple HTTP Redirects to Bypass SSRF Protections intermediate | The content discusses a technique involving multiple HTTP redirects to circumvent Server-Side Request Forgery (SSRF) protections. This method utilizes a series of redirects to trick a server into accessing unintended resources, potentially bypassing security measures. It highlights a vulnerability that attackers could exploit to manipulate servers into making requests to unauthorized destinations. This technique poses a risk to systems relying on SSRF defenses, emphasizing the importance of implementing robust security measures to prevent such attacks. |
| 2022-08-02 2022 | A Glossary of Blind SSRF Chains beginner 9 min read | Glossary detailing blind SSRF chains, focusing on proving impact when responses are unreadable. It explores techniques like "SSRF canaries" for verifying internal service interaction and identifying internal hosts via DNS and tools like AltDNS. The glossary covers leveraging response characteristics (errors, size, timing) for detection and mentions exploit vectors such as blind XXE and app-specific redirects, with examples including Confluence, Artifactory, Jenkins, and JAMF, and touches upon Apache mod_proxy SSRF (CVE-2021-40438). |
| 2021-11-26 2021 | New differential fuzzing tool reveals novel HTTP request smuggling techniques advanced Fuzzing | Tool, Burp Suite, is a leading web security testing toolkit trusted by professionals for over 20 years. It enables comprehensive web security testing and features a thriving community of practitioners who teach, learn, and extend its capabilities. Burp Suite is used by top organizations, including Microsoft, to secure web applications. → portswigger.net |
| 2021-11-12 2021 | Advanced request smuggling advanced 8 min read API Sec | Library detailing advanced request smuggling techniques, including HTTP/2-based vectors enabled by H2.CL and H2.TE vulnerabilities. It covers how HTTP/2 downgrading can lead to desynchronization, response queue poisoning, and persistent site takeover, leveraging Burp's HTTP/2 testing capabilities and highlighting common misconfigurations that create exploitable attack surfaces. → portswigger.net |
| 2021-10-08 2021 | Finding SSRF via HTML Injection inside a PDF file on AWS EC2 intermediate | Finding SSRF via HTML Injection inside a PDF file on AWS EC2 |
| 2021-10-04 2021 | 10 Types of Web Vulnerabilities that are Often Missed beginner 16 min read Bug Bounty IDOR SQLi XSS | Library exploring web vulnerabilities frequently overlooked by security testers, detailing techniques such as HTTP/2 smuggling, XXE via Office Open XML parsers, SSRF via XSS in PDF generators, and XSS via SVG files. It highlights obscure bug classes and approaches to traditional vulnerabilities, drawing upon research from sources like Wallarm, James Kettle, and Hakluke. The library provides insights into exploitation methods and practical examples, including the use of custom tools like http2smugl for HTTP/2 smuggling. → labs.detectify.com |
| 2021-04-15 2021 | Story of a really cool SSRF bug.. Hello all! My name is Vedant, also… | by intermediate | Vedant, also known as Vegeta on Twitter, is a cybersecurity enthusiast and bug bounty hunter. He shares a story about discovering a significant Server-Side Request Forgery (SSRF) bug. This bug showcases his skills in identifying vulnerabilities and his passion for cybersecurity. → infosecwriteups.com |
| 2021-04-10 2021 | $10000 Facebook SSRF (Bug Bounty) | by Amine Aboud | Medium intermediate | The content discusses a bug bounty reward of $10,000 for a blind Server-Side Request Forgery (SSRF) vulnerability found on Facebook. The process involved subdomain enumeration, file bruteforcing, and code review to identify the SSRF issue. The author, Amine Aboud, highlights the methodology used to discover the vulnerability and emphasizes the importance of thorough testing to uncover such security flaws. |
| 2019-08-23 2019 | SSRF in the Wild intermediate | The content discusses SSRF (Server-Side Request Forgery) vulnerabilities found in real-world scenarios. It emphasizes that the analysis is not based on scientific methods but rather focuses on the prevalence of SSRFs in practical situations. The term "in the wild" suggests that these vulnerabilities are encountered in real-world environments rather than just theoretical discussions. The content likely provides insights into the frequency and impact of SSRF vulnerabilities discovered outside controlled testing environments. |
| 2019-04-20 2019 | PDFReacter SSRF to ROOT Level Local File Read which led to RCE advanced RCE | PDFReacter is a parser that converts HTML content to PDF. |
| 2018-09-15 2018 | Into the Borg – SSRF inside Google production network | OpnSec intermediate XSS | In March 2018, a security researcher found an XSS vulnerability in Google Caja, a tool for embedding html/javascript securely. The issue was reported to Google and fixed in May 2018. The researcher tested Google Sites and Google Caja, discovering the vulnerability within Google's production network. The article discusses the process of identifying and reporting the XSS vulnerability, highlighting the importance of security testing in large-scale systems like Google's. |
| 2018-06-27 2018 | Server Side Request Forgery (SSRF) Testing intermediate | The content discusses Server Side Request Forgery (SSRF) testing for fun rather than for a bounty. The author discovered a vulnerable website to SSRF but did not elaborate on the exploitation process. |
| 2018-06-15 2018 | How i converted SSRF TO XSS in jira. intermediate XSS | The content discusses the author's interest in bug bounty hunting and their focus on finding vulnerabilities like Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) in Jira. The author shares their experience of converting SSRF into XSS, highlighting their dedication to discovering new vulnerabilities and improving their reconnaissance skills. |
| 2018-06-07 2018 | How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE! advanced RCE | The content appears to be a brief introduction with minimal information provided. It mentions chaining four vulnerabilities on GitHub Enterprise, starting from SSRF execution to achieving Remote Code Execution (RCE). The author is identified as 🍊. |