Vulnerability field guide

SSRF

Server-side request forgery turns a trusted server into a request-making proxy for the attacker, reaching internal services and cloud credentials the internet should never touch. Here is how it works and how to lock it down.

4 articles18 min totalOverview to advanced techniques
Start herehttp://10.0.0.5:8080/admin
Step 01 · Start with the overview
SSRF3 min read

SSRF, Explained: When Your Server Becomes the Attacker's Proxy

Server-side request forgery turns a trusted server into a request-making proxy for the attacker, reaching internal services and cloud credentials the internet should never touch. Here is how it works and how to lock it down.

Read the overview
Continue the field guide

SSRF techniques

3 focused deep-dives
  1. 02BlindBlind and Out-of-Band SSRF: Detecting the Request You Can't See5 min
  2. 03Cloud MetadataCloud-Metadata SSRF: From One URL to Full Account Takeover5 min
  3. 04Protocol SmugglingProtocol Smuggling in SSRF: gopher, dict and file Schemes5 min