Server-Side Request Forgery (SSRF)- PortSwigger Labs

Lab: Basic SSRF against another back-end system

SSRF Attack Lifecycle

Lab: Basic SSRF against another back-end system

Objectives:

This lab has a stock check feature that fetches data from an internal system.

To solve the lab, use the stock check functionality to scan the internal 192.168.0.X range for an admin interface on port 8080, then use it to delete the user carlos.

Lab: Basic SSRF against another back-end system

Lab: Basic SSRF against another back-end system | Web Security Academy

Lab walkthrough

Lets check the application

Vulnerable App

Looks like stockAPI is making HTTP request to this IP address(localhost) 192.168.0.1