Server-side request forgery (SSRF) In this section we explain what server-side request forgery (SSRF) is, and describe some common examples. We also show you how to find and exploit SSRF …

Server-side request forgery (SSRF) attacks This learning path teaches you about server-side request forgery (SSRF). You'll learn about its impact, common techniques used in attacks, and how to defend …

Blind SSRF vulnerabilities In this section, we'll explain what blind server-side request forgery is, describe some common blind SSRF examples, and explain how to find and exploit blind SSRF vulnerabilities. …

Server Side Request Forgery - SSRF. What is it? How does it work? Basic SSRF against local server.

Apr 10, 2026 · Professional Community Edition Testing for SSRF vulnerabilities with Burp Suite Last updated: April 10, 2026 Read time: 1 Minute Server-side request forgery (SSRF) is a web security …

URL validation bypass cheat sheet This cheat sheet contains payloads for bypassing URL validation. These wordlists are useful for attacks such as server-side request forgery, CORS misconfigurations, …

LAB PRACTITIONER SSRF with blacklist-based input filter LAB PRACTITIONER SSRF with filter bypass via open redirection vulnerability LAB EXPERT Blind SSRF with Shellshock exploitation LAB

2 days ago · Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location. SSRF vulnerabilities …

XML external entity (XXE) injection In this section, we'll explain what XML external entity injection is, describe some common examples, explain how to find and exploit various kinds of XXE injection, …

This endpoint can be used to retrieve data about the instance, some of which might be sensitive. To solve the lab, exploit the XXE vulnerability to perform an SSRF attack that obtains the server's IAM …