List: SSRF | Curated by p4n7h3rx

Dec 9, 2024

28 stories

2 saves

SSRF
Mohsin khan
Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful RequestsHey everyone, hope you’re all doing well! I wanted to share a cool bug story I came across a few months ago. It’s about an SSRF…
Sep 29, 2024
6
Sep 29, 2024
6
Cristi Vlad
Exfiltrating AWS Credentials via PDF Rendering of Unsanitized InputI know the title is a mouthful; submissions are open for better candidates. If you have one, suggest it below!
Mar 1, 2023
1
Mar 1, 2023
1
In
InfoSec Write-ups
by
Basavaraj Banakar
SSRF That Allowed Us to Access Whole Infra Web Services and Many MoreHi this is Basavaraj back again with another writeup on SSRF.
Feb 12, 2023
5
Feb 12, 2023
5
 This story is no longer available
In
InfoSec Write-ups
by
Preetham Bomma
SVG SSRFs and saga of bypassesHi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…
Apr 11, 2022
Apr 11, 2022
Deep Parasiya
SSRF IN-DEPTH…Hello mates, welcome back to my another blog.
Sep 24, 2022
Sep 24, 2022
Avinash Jain (@logicbomb)
A bug worth 1.75Lacs — AWS SSRF to RCEHow I escalated well known AWS SSRF to perform Remote Code Execution (RCE) in one of the India’s growing startups.
Oct 27, 2022
4
Oct 27, 2022
4
In
System Weakness
by
S Rahul
Bug Bounty { How I found an SSRF ( Reconnaissance ) }Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…
Sep 6, 2022
9
Sep 6, 2022
9
Md. Asif Hossain
How I found my first SSRF to RCE!Hi Guys,
Sep 4, 2022
7
Sep 4, 2022
7
Ittipatjitrada
How I found SSRF external interaction on Bugcrowd Public program in 5 minTools
- https://subdomainfinder.c99.nl/
- burp suite
- burp Collaborator 
- assetfinder : https://github.com/tomnomnom/assetfinder
- httpx…
May 24, 2022
3
May 24, 2022
3
Kwadwo Amoako
SSRF to a Full Account Takeover (ATO)Hello hackers!! today, I will be showing you how I performed an SSRF and Account Takeover attack, using host header injection. Let's get…
Mar 4, 2022
11
Mar 4, 2022
11
In
InfoSec Write-ups
by
Muh. Fani Akbar
Server-Side Request Forgery to Internal SMTP AccessIntroduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…
Feb 5, 2022
Feb 5, 2022
SirLeeroyJenkins
Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuiteIntroduction:
Jan 28, 2022
3
Jan 28, 2022
3
Abdulrahman Makki | عبدالرحمن مكي
Full SSRF by exporting PDFHello Everyone 👋
Jan 17, 2022
Jan 17, 2022
Kaorrosi
Finding and Exploiting SSRF VulnerabilitiesI’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!
Dec 18, 2021
2
Dec 18, 2021
2
 This story is no longer available
Pravinrp
Bug Hunting: SSRF attackWhat is SSRF attack?
Oct 12, 2020
1
Oct 12, 2020
1
Pravinrp
SSRF payloadsPayloads with localhost
Aug 9, 2019
Aug 9, 2019
In
Appsecco
by
Riyaz Walikar
Finding SSRF via HTML Injection inside a PDF file on AWS EC2Finding SSRF on app hosted on AWS EC2 allows for data theft from AWS account. Capital One lost 100M+ bank records due to an issue like…
Apr 5, 2020
3
Apr 5, 2020
3
In
InfoSec Write-ups
by
hosein vita
An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata !In The Name Of God.
Jun 13, 2021
1
Jun 13, 2021
1

SSRF

Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful Requests

Hey everyone, hope you’re all doing well! I wanted to share a cool bug story I came across a few months ago. It’s about an SSRF…

Exfiltrating AWS Credentials via PDF Rendering of Unsanitized Input

I know the title is a mouthful; submissions are open for better candidates. If you have one, suggest it below!

SSRF That Allowed Us to Access Whole Infra Web Services and Many More

Hi this is Basavaraj back again with another writeup on SSRF.

SVG SSRFs and saga of bypasses

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…

SSRF IN-DEPTH…

Hello mates, welcome back to my another blog.

A bug worth 1.75Lacs — AWS SSRF to RCE

How I escalated well known AWS SSRF to perform Remote Code Execution (RCE) in one of the India’s growing startups.

Bug Bounty { How I found an SSRF ( Reconnaissance ) }

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…

How I found my first SSRF to RCE!

Hi Guys,

How I found SSRF external interaction on Bugcrowd Public program in 5 min

Tools - https://subdomainfinder.c99.nl/ - burp suite - burp Collaborator - assetfinder : https://github.com/tomnomnom/assetfinder - httpx…

SSRF to a Full Account Takeover (ATO)

Hello hackers!! today, I will be showing you how I performed an SSRF and Account Takeover attack, using host header injection. Let's get…

Server-Side Request Forgery to Internal SMTP Access

Introduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…

Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite

Introduction:

Full SSRF by exporting PDF

Hello Everyone 👋

Finding and Exploiting SSRF Vulnerabilities

I’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!

Bug Hunting: SSRF attack

What is SSRF attack?

SSRF payloads

Payloads with localhost

Finding SSRF via HTML Injection inside a PDF file on AWS EC2

Finding SSRF on app hosted on AWS EC2 allows for data theft from AWS account. Capital One lost 100M+ bank records due to an issue like…

An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata !

In The Name Of God.

p4n7h3rx