Ssrf

Introduction we have to get a flag that is located in /app/flag.txt. This is the main page. There is a button called Image Viewer. If we click the Image viewer, there is a url section that user can enter.

In this gripping article, we dive deep into the thrilling world of bug bounty hunting, uncovering the astonishing revelation of a hidden vulnerability. By meticulously analyzing JavaScript files, we stumbled upon an endpoint that loaded external content from the server. …

Hello, my name is W1C3 and today, I am going to explain how to obtain arbitrary file read access through Server-Side Request Forgery (SSRF) by bypassing filter. This challenge was developed for the WaniCTF. Name Screenshot Description An application that takes screenshots of your favorite websites. Walkthrough Upon accessing the website, it can…

Exploring the Working Principle, Exploitation, and Prevention Techniques of SSRF Vulnerabilities | Karthikeyan Nagaraj — Introduction: Server-side request forgery (SSRF) is a common web application vulnerability that allows attackers to send unauthorized requests to internal or external systems. This vulnerability can be exploited to perform various malicious activities, such as accessing sensitive data, executing arbitrary code, and bypassing security controls.

Hi, I’m Aakash Rathee, a Security Engineer III at Esper. I work on a variety of security topics, including Application Security, Cloud Security, and DevSecOps. Additionally, I enjoy participating in bug bounty programs as a way to stay sharp and learn about new vulnerabilities. In the world of web application…

Hello, I am a 16-year-old bug bounty hunter. I would like to appreciate God Almighty for helping me to find this bug. This is my first Medium Blog Post and in this blog post, I will share my experience of finding my first SSRF vulnerability using Dirsearch and explain the…

Hey, I am W1C3, and today I will explain how, through chained vulnerabilities, we were able to achieve Remote Code Execution (RCE). In this challenge, we first used brute force techniques to discover directories that were previously unknown. Once we gained access to the “Browser” directory, we were able to…

Task 1 What is an SSRF? What is an SSRF? SSRF stands for Server-Side Request Forgery. It’s a vulnerability that allows a malicious user to cause the webserver to make an additional or edited HTTP request to the resource of the attacker’s choosing. Two types of SSRF: Regular SSRF: data…