Questions tagged [ssrf]
Server Side Request Forgery (SSRF) is a vulnerability that appears when an attacker has the ability to create requests from the vulnerable server.
-1
votes
2answers
79 views
Testing RCE and SSRF using Python SimpleHTTPServer [closed]
Is it possible to test RCE and SSRF vulnerabilities using Python SimpleHTTPServer? Or should I use a VPS server?
0
votes
2answers
492 views
What is the difference between RFI/LFI and SSRF?
Is there any difference between those? Can we say that Server Side Request Forgery (SSRF) is a generalization of Remote File Inclusion (RFI) and Local File Inclusion (LFI)?
1
vote
1answer
51 views
SSRF when user input is appended to hostname
Is it considered a SSRF vulnerability (or is it dangerous at all) if the backend of an application fetches a URL that is somewhat based off of user input, in a way similar to this
get("https://...
1
vote
2answers
263 views
Server Side request forgery (SSRF) explanation
I am looking to gain a better understanding of the SSRF vulnerability.
I have googled and watched YouTube tutorials but they all show advanced techniques that are difficult to understand.
I am ...
0
votes
0answers
43 views
How to craft udp packets in ssrf without gopher or with dict?
Hi am a security researcher at a product based company and recently I discovered a ssrf as follows:-
$imgurl = $_REQUEST['file_storefrontbanner']['C'];
$filename= basename($imgurl);
$header_data = @...
2
votes
1answer
323 views
What can be done with Blind SSRF?
I know SSRF can be exploited with the file:// protocol to read local files (something like path traversal) and also scan ports of hosts from the same network as the web server.
but how Blind SSRF can ...
2
votes
0answers
564 views
how to fix Out-of-band resource load (HTTP) issue identified by BURP scan
I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0).
BURP Scan has identified one issue in my web application. Issue is something like ...
1
vote
1answer
459 views
SSRF PoC using fill=“url(…)” with absolute path
I read this interesting report which describes a SSRF vulnerability allowing to fetch internal images by using the url property in a path element. However, even though this vulnerability most likely ...
4
votes
2answers
92 views
Potential issues allowing users to set any URL as web hook
I’m still in the planning stage so this may not be fully fleshed out, but I’m working on a SaaS project. Part of which allows users (customers of my SaaS) to configure my API to watch for events and ...
1
vote
1answer
271 views
Attacker can check external IP from a SSRF vuln?
I'm testing for SSRF vulnerabilities so my question is; can I check external IP (from another computer on the network) from a SSRF vulnerability?
5
votes
1answer
600 views
SSRF Attack Exploitation Scenario
In this video (0:37) the guy starts a simple HTTP server using Python and then uses a link to fetch a file from the server he just started. But how does this pose a potential security vulnerability?
...
12
votes
1answer
4k views
Preventing Server-Side Request Forgeries in Java
The application lets users specify a URL for their profile picture. It fetches the data from the URL and saves it on the server. However, the app is vulnerable to server-side request forgery (SSRF) - ...
