If you want to master SSRF, open this thread!
Server-Side Request Forgery vulnerabilities are attacks that allow attackers to send arbitrary requests from the server often resulting in gaining authorized access to data!🤯
A Thread 🧵👇
Server-Side Request Forgery vulnerabilities are attacks that allow attackers to send arbitrary requests from the server often resulting in gaining authorized access to data!🤯
A Thread 🧵👇
[1️⃣] Server-side request forgery by @PortSwigger
As always, when talking about web vulnerabilities, PortSwigger academy is the place to go! Their labs offer a great way to practice your skills as well!
👇 portswigger.net/web-security/s…
As always, when talking about web vulnerabilities, PortSwigger academy is the place to go! Their labs offer a great way to practice your skills as well!
👇 portswigger.net/web-security/s…
[2️⃣] SSRF in 100 seconds by @PinkDraconian
Want a quick overview of what SSRF is? Check out this video explaining SSRF in 100 seconds!
👇
Want a quick overview of what SSRF is? Check out this video explaining SSRF in 100 seconds!
👇
[3️⃣] SSRF Techniques mindmap
A mindmap is a great way to visualize what SSRF techniques there are! We couldn't find the author of this mindmap, meaning we can't give credit. If you know who created it, let us know! 💪
👇 xmind.app/m/eJm7bd/#
A mindmap is a great way to visualize what SSRF techniques there are! We couldn't find the author of this mindmap, meaning we can't give credit. If you know who created it, let us know! 💪
👇 xmind.app/m/eJm7bd/#
[4️⃣] Bug bounty writeup by @win3zz
SSRF is one of the most found vulnerabilities in bug bounty. There are tons of great writeups out there, but we really liked this on granting a HUGE bounty on Facebook!
👇 medium.com/@win3zz/how-i-…
SSRF is one of the most found vulnerabilities in bug bounty. There are tons of great writeups out there, but we really liked this on granting a HUGE bounty on Facebook!
👇 medium.com/@win3zz/how-i-…
[5️⃣] SSRFMap by @pentest_swissky
Exploiting SSRF vulnerabilities can often be quite hard, this framework can help you out and make it a bit less time-intensive!
👇 github.com/swisskyrepo/SS…
Exploiting SSRF vulnerabilities can often be quite hard, this framework can help you out and make it a bit less time-intensive!
👇 github.com/swisskyrepo/SS…
[6️⃣] Cheatsheet by @pentest_swissky
Want a concise overview of different SSRF filter bypasses? Check out this amazing cheatsheet!
👇 github.com/swisskyrepo/Pa…
Want a concise overview of different SSRF filter bypasses? Check out this amazing cheatsheet!
👇 github.com/swisskyrepo/Pa…
[7️⃣] Hackademy by @intigriti
Did you know that Intigriti has its very own hackademy? This is the place for you to learn about a bunch of security issues!
👇 blog.intigriti.com/hackademy/serv…
Did you know that Intigriti has its very own hackademy? This is the place for you to learn about a bunch of security issues!
👇 blog.intigriti.com/hackademy/serv…
[8️⃣] Redirector by @intigriti
Our redirector tool is great to quickly generate payloads for all your SSRF and open redirect needs!
👇 tools.intigriti.io/redirector/
Our redirector tool is great to quickly generate payloads for all your SSRF and open redirect needs!
👇 tools.intigriti.io/redirector/
[9️⃣] Preventing SSRF vulnerabilities by @owasp
Knowing how developers should fix SSRF issues can be a huge benefit when trying to find vulnerable instances. Definitely give this a read!
👇cheatsheetseries.owasp.org/cheatsheets/Se…
Knowing how developers should fix SSRF issues can be a huge benefit when trying to find vulnerable instances. Definitely give this a read!
👇cheatsheetseries.owasp.org/cheatsheets/Se…
[🔟] SSRF in a lab by @0xdf_ and @hackthebox_eu
Want to put your skills to the test? Check out this incredibly difficult lab by HTB. Here, we'll already link the writeup because you may need it 😅
👇 0xdf.gitlab.io/2022/10/15/htb…
Want to put your skills to the test? Check out this incredibly difficult lab by HTB. Here, we'll already link the writeup because you may need it 😅
👇 0xdf.gitlab.io/2022/10/15/htb…
That's all for this thread! 🧵
You've learned enough to go out there and find some SSRF vulnerabilities! 👩💻
Do you know any more resources? Be sure to share them in the comments! 🔥
And if you want more of these threads, be sure to leave a like 💜
You've learned enough to go out there and find some SSRF vulnerabilities! 👩💻
Do you know any more resources? Be sure to share them in the comments! 🔥
And if you want more of these threads, be sure to leave a like 💜
• • •
Missing some Tweet in this thread? You can try to
force a refresh
