SSRF for fun & profit

Web Hacking
1

I recently read an excellent article by d0nut on his experience in hunting for SSRF vulns.

Check it out here.

What stood out for me is how he approaches testing features he suspects may be vulnerable to SSRF, and the way he shared it with practice stories from his own experiences. Has me rethinking my approach to SSRF. Especially after I checked out Ben’s slides on how he p0wned a server side PDF rendering on Uber.

Worth the read. Enjoy! :upside_down_face:

4 Likes
2

Thanks for the kind words! :smiley:

3

No problem.

Thanks for sharing your experience! :100:

6

Thank you for sharing this article upsers