HACKR.GG
LabsLinkPeek — Internal Fetch
SSRFEasy

LinkPeek — Internal Fetch

LinkPeek is a URL preview service. It'll fetch any URL you give it — including internal ones. Find the hidden endpoint that was never meant to be public.

Step-by-step walkthrough
// Objective

Use the URL preview feature to make the server request an internal endpoint and retrieve the flag.

ToolkitBrowsercurl
// Machine control
Checking session...
// Submit flag