#ssrf-attack

AWS S3 Multi-Bucket Compromise via GraphQL Federation SSRF

Pendahuluan

ReportVerse (Official Writeup) WebVerse-pro.com

Lab can be found at: https://webverselabs-pro.com/

OWASP Top 10 2021 #10 — Server-Side Request Forgery (SSRF) 🌐

The Vulnerability That Turns Your Server Into an Attacker’s Proxy

Lab: SSRF with whitelist-based input filter | SSRF #lab7

Solution:

SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems

A single misconfigured URL parameter can allow an attacker to abuse server-side requests and potentially access internal services, cloud…

SERVER-SIDE REQUEST FORGERY (SSRF) in crAPI

One of the dangerous vulnerabilities in API security is Server-Side Request Forgery (SSRF). It is categorized as API7: Server Side Request…

Exploiting an SSRF Vulnerability to Access an Internal Service on Port 9090-Hackviser Problem

While solving a challenge on Hackviser, I came across a web application that contained a Server-Side Request Forgery (SSRF) vulnerability…

Exploiting an SSRF Vulnerability to Read /etc/passwd, an Hackervise Challenge Walkthrough

The use of an Open Redirect in Server Side Request Forgery (SSRF) — A Portsw

In previous articles, we’ve already covered what Server-Side Request Forgery (SSRF) is. In this post, we’ll look at how open redirects can…

Blind Server Side Request Forgery — A Portswigger

We have already looked at Server-Side Request Forgery (SSRF) and found that exploitation usually relied on one key advantage: visibility…

ZAST.AI identified 6+ vulnerabilities in JeeSite

🔍ZAST.AI identified 6+ vulnerabilities in JeeSite <=5.12.0 b522b3f: • SSRF (CVE-2025–7759) • Multiple Open Redirection flaws…