List: SSRF | Curated by p4n7h3rx

Dec 9, 2024

28 stories

2 saves

SSRF
Mohsin khan
Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful RequestsHey everyone, hope you’re all doing well! I wanted to share a cool bug story I came across a few months ago. It’s about an SSRF…
Sep 29, 2024
625
6
Sep 29, 2024
625
6
Cristi Vlad
Exfiltrating AWS Credentials via PDF Rendering of Unsanitized InputI know the title is a mouthful; submissions are open for better candidates. If you have one, suggest it below!
Mar 1, 2023
175
1
Mar 1, 2023
175
1
In
InfoSec Write-ups
by
Basavaraj Banakar
SSRF That Allowed Us to Access Whole Infra Web Services and Many MoreHi this is Basavaraj back again with another writeup on SSRF.
Feb 12, 2023
265
5
Feb 12, 2023
265
5
 This story is no longer available
In
InfoSec Write-ups
by
Preetham Bomma
SVG SSRFs and saga of bypassesHi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…
Apr 11, 2022
262
Apr 11, 2022
262
Deep Parasiya
SSRF IN-DEPTH…Hello mates, welcome back to my another blog.
Sep 24, 2022
41
Sep 24, 2022
41
Avinash Jain (@logicbomb)
A bug worth 1.75Lacs — AWS SSRF to RCEHow I escalated well known AWS SSRF to perform Remote Code Execution (RCE) in one of the India’s growing startups.
Oct 27, 2022
534
4
Oct 27, 2022
534
4
In
System Weakness
by
S Rahul
Bug Bounty { How I found an SSRF ( Reconnaissance ) }Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…
Sep 6, 2022
555
9
Sep 6, 2022
555
9
Md. Asif Hossain
How I found my first SSRF to RCE!Hi Guys,
Sep 4, 2022
442
7
Sep 4, 2022
442
7
Ittipatjitrada
How I found SSRF external interaction on Bugcrowd Public program in 5 minTools
- https://subdomainfinder.c99.nl/
- burp suite
- burp Collaborator 
- assetfinder : https://github.com/tomnomnom/assetfinder
- httpx…
May 24, 2022
347
3
May 24, 2022
347
3
Kwadwo Amoako
SSRF to a Full Account Takeover (ATO)Hello hackers!! today, I will be showing you how I performed an SSRF and Account Takeover attack, using host header injection. Let's get…
Mar 4, 2022
249
11
Mar 4, 2022
249
11
In
InfoSec Write-ups
by
Muh. Fani Akbar
Server-Side Request Forgery to Internal SMTP AccessIntroduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…
Feb 5, 2022
65
Feb 5, 2022
65
SirLeeroyJenkins
Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuiteIntroduction:
Jan 28, 2022
523
3
Jan 28, 2022
523
3
Abdulrahman Makki | عبدالرحمن مكي
Full SSRF by exporting PDFHello Everyone 👋
Jan 17, 2022
14
Jan 17, 2022
14
Kaorrosi
Finding and Exploiting SSRF VulnerabilitiesI’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!
Dec 18, 2021
103
2
Dec 18, 2021
103
2
 This story is no longer available
Pravinrp
Bug Hunting: SSRF attackWhat is SSRF attack?
Oct 12, 2020
75
1
Oct 12, 2020
75
1
Pravinrp
SSRF payloadsPayloads with localhost
Aug 9, 2019
346
Aug 9, 2019
346
In
Appsecco
by
Riyaz Walikar
Finding SSRF via HTML Injection inside a PDF file on AWS EC2Finding SSRF on app hosted on AWS EC2 allows for data theft from AWS account. Capital One lost 100M+ bank records due to an issue like…
Apr 5, 2020
369
3
Apr 5, 2020
369
3
In
InfoSec Write-ups
by
hosein vita
An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata !In The Name Of God.
Jun 13, 2021
417
1
Jun 13, 2021
417
1

SSRF

Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful Requests

Hey everyone, hope you’re all doing well! I wanted to share a cool bug story I came across a few months ago. It’s about an SSRF…

Exfiltrating AWS Credentials via PDF Rendering of Unsanitized Input

I know the title is a mouthful; submissions are open for better candidates. If you have one, suggest it below!

SSRF That Allowed Us to Access Whole Infra Web Services and Many More

Hi this is Basavaraj back again with another writeup on SSRF.

SVG SSRFs and saga of bypasses

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…

SSRF IN-DEPTH…

Hello mates, welcome back to my another blog.

A bug worth 1.75Lacs — AWS SSRF to RCE

How I escalated well known AWS SSRF to perform Remote Code Execution (RCE) in one of the India’s growing startups.

Bug Bounty { How I found an SSRF ( Reconnaissance ) }

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…

How I found my first SSRF to RCE!

Hi Guys,

How I found SSRF external interaction on Bugcrowd Public program in 5 min

Tools - https://subdomainfinder.c99.nl/ - burp suite - burp Collaborator - assetfinder : https://github.com/tomnomnom/assetfinder - httpx…

SSRF to a Full Account Takeover (ATO)

Hello hackers!! today, I will be showing you how I performed an SSRF and Account Takeover attack, using host header injection. Let's get…

Server-Side Request Forgery to Internal SMTP Access

Introduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…

Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite

Introduction:

Full SSRF by exporting PDF

Hello Everyone 👋

Finding and Exploiting SSRF Vulnerabilities

I’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!

Bug Hunting: SSRF attack

What is SSRF attack?

SSRF payloads

Payloads with localhost

Finding SSRF via HTML Injection inside a PDF file on AWS EC2

Finding SSRF on app hosted on AWS EC2 allows for data theft from AWS account. Capital One lost 100M+ bank records due to an issue like…

An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata !

In The Name Of God.

p4n7h3rx