Vulnerability field guide
SSRF
Server-side request forgery turns a trusted server into a request-making proxy for the attacker, reaching internal services and cloud credentials the internet should never touch. Here is how it works and how to lock it down.
4 articles18 min totalOverview to advanced techniques
Start here
http://10.0.0.5:8080/adminStep 01 · Start with the overview
SSRF3 min read
SSRF, Explained: When Your Server Becomes the Attacker's Proxy
Server-side request forgery turns a trusted server into a request-making proxy for the attacker, reaching internal services and cloud credentials the internet should never touch. Here is how it works and how to lock it down.
Read the overviewContinue the field guide
3 focused deep-dives