Injection

SSRF — Server-Side Request Forgery

Make the server fetch URLs on your behalf — reaching internal services, cloud metadata APIs, and systems that are completely inaccessible from the internet.

Intermediate50 min11 lessons3 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Understand how SSRF turns the server into your proxy
✓Reach internal services (metadata APIs, admin panels) via SSRF
✓Bypass SSRF filters using DNS rebinding and alternative IP notation
✓Escalate SSRF to cloud credential theft via IMDS endpoints

Lessons

1Capital One — 100 Million Records via SSRF
2What is SSRF?
3Finding and Exploiting SSRF
4Blind SSRF
5Your Turn: Make the Server FetchHANDS-ON
6Level Up: Dodge the BlocklistHANDS-ON
7Protocol Smuggling
8Tool — curl
9Module quiz
10Prevention & Defense
11Hands-on Lab: Exploit LinkPeekHANDS-ON

Start free →