search

cwong-scw / action-playground

0 stars 2 forks source link

trhrh #12

Open cwong-scw opened 3 years ago

cwong-scw commented 3 years ago

rgerjghf ssrf ghjfhgjk

temp-scw-app[bot] commented 3 years ago

Micro-Learning Topic: Server-Side Request Forgery (SSRF) (Detected by phrase)

What is this? (2min video)

Server-Side Request Forgery (SSRF) vulnerabilities are caused when an attacker can supply or modify a URL that reads or sends data to the server. The attacker can create a malicious request with a manipulated URL, when this request reaches the server, the server-side code executes the exploit URL causing the attacker to be able to read data from services that shouldn't be exposed.

Look for places where URLs are handled such as calling resources from external servers, requests that are sent to external services or custom webhooks. Additionally, check where the user can specify custom URLs.

Try this challenge in Secure Code Warrior