domains / families / security / exploiting-server-side-request-forgery

exploiting-server-side-request-forgery

separate

Identifying and exploiting SSRF vulnerabilities to access internal services,

When to use

• During authorized penetration tests when the application fetches URLs provided by users (webhooks, URL previews, file imports)
• When testing cloud-hosted applications for access to instance metadata services
• For assessing PDF generators, screenshot services, or any feature that renders external content
• When evaluating microservice architectures for internal service access via SSRF
• During security assessments of APIs that accept URL parameters for data fetching

Skill page

Source