Apr 17

3 min read

Server-Side Request Forgery (SSRF)- PortSwigger Labs

Lab: Basic SSRF against another back-end system

SSRF Attack Lifecycle

Lab: Basic SSRF against another back-end system

Objectives:

This lab has a stock check feature that fetches data from an internal system.

--

More from Michael Koczwara

Security Researcher [RED&BLUE]

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Exploiting Software-ATTACK PATTERN — Part 2

Exploiting CSRF (GET Methods)

For anyone asking about 8.4% of token part. It’s airdrop and Bounty Campaign.

Fighting the Wave of B2B Check Fraud

in

CryptoGen Nepal

The Planet’s Prestige — Blue Team Labs Online Walkthrough

in

ReadWrite

Evaluating Popular Web Browsers in Terms of Security and Privacy

Konomi Network Has Passed Beosin Technology’s Comprehensive Security Audit

{UPDATE} Hero Generations Hack Free Resources Generator

About Help Terms Privacy

Get the Medium app

Michael Koczwara

Michael Koczwara

Security Researcher [RED&BLUE]

More from Medium

Server-Side Request Forgery (SSRF)- PortSwigger Labs

in

System Weakness

This Kibana Vulnerability can give you RCE in a snap | Kibana CVE-2019–7609

VulnHub Walkthrough’s : BOX 1

SQL injection UNION attack, finding a column containing text (walkthrough)

Help
Status
Writers
Blog
Careers
Privacy
Terms
About
Knowable