PenTest Hub

Your Ultimate Pentesting Arsenal

Server-Side Request Forgery

Medium

SSRF vulnerabilities occur when a web application is fetching a remote resource without validating the user-supplied URL.

Example 1

Access to cloud instance metadata

Example 2

Internal port scanning

Example 3

Access to internal services