SSRF Vulnerability Learning

SSRF

SSRF (Server-side Request forgery: server-side solicitation forgery) is a security vulnerability that is constructed by an attacker to form a request by the service side. In general, the target of an SSRF attack is an internal system that is inaccessible from the outside network. (because it is initiated by the server, it can request an internal system that is connected to it and isolated from the extranet)

Most of the reasons for the formation of SSRF are due to the fact that the server provides the ability to retrieve data from other servers and does not filter and limit the target address. For example, from the specified URL address to obtain Web page text content, loading the specified address of the picture, download and so on.

Reference:

Http://evi1cg.me/archives/SSRF_Bypass.html

Https://sobug.com/article/detail/11

Http://0cx.cc/how_to_scan_weblogic_ssrf.jspx

SSRF Vulnerability Learning