Thread by @Aacle_

Server Side Request Forgery(SSRF)
#bugbounty #infosec

🧵: (1/n) ⬇⬇⬇

🏹Use Different Encoding Schemes of https://127.O.O.1

➡Hex Encoding https://Ox7f.OxO.OxO.Ox1
➡Octal Encoding https://0177.O.O.01
➡Dword Encoding https://2130706433
➡URL Encoding ➡https://%6c%6f%63%61%6c%68%6f%73%74
➡Mixed Encoding https://0177.O.O.Ox1

🧵: (2/n) :👇

🏹Use The Whole IP Range For Testing SSRF
(198.0.0.1-255) #bugbounty
. . .
🏹Obfuscate Strings In URL Encode or Case Transformation (Blocked Words Bypass)

🏹Use Registered Domain Names That Resolves To 127.0.0.1

🏹Embed Credentials : https://[e-mail]

🧵: (3/n) :👇

🏹Use URL Fragments '#' : https://attacker'#'victim.com
(Remome the '' over the hash)

🏹Use DNS Subdomain Method :
https ://victim.com.evil.com

🏹Use Directory Method :
https ://attacker.com/victim.com

🏹Exploit Redirecting The Target

🧵: (4/n) :👇 #bugbounty

🏹Change The Referrer To Burp Collaborator [Blind Exploit) #bugbounty #bugbountytips #SSRF #infosec

🏹Use IPv6 addresses instead of IPv4

🏹Usable Protocols:
▪gopher : //
▪file: //
▪dict://
▪sftp://

Thank You so much For
Reading thread on SSRF😀🤗

Hope you like it

You can join my bug bounty tips telegram group if you want : ↙
t.me/bugbountyresou…