What You Need To Know About Server Side Request Forgery (SSRF)


SSRF or Server Side Request Forgery is an attack vector that has been around for a long time, but do you actually know what it is?

Server Side Request Forgery (SSRF) refers to an attack where in an attacker is able to send a crafted request from a vulnerable web application. SSRF is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network.

What You Need To Know About SSRF - Server Side Request Forgery

Typically Server Side Request Forgery (SSRF) occurs when a web application is making a request, where an attacker has full or partial control of the request that is being sent. A common example is when an attacker can control all or part of the URL to which the web application makes a request to some third-party service.

There are various things you can use SSRF for such as:

  • Scanning other machines within the private network of the vulnerable server that aren’t externally accessible
  • Performing Remote File Inclusion (RFI) attacks
  • Bypassing firewalls and use the vulnerable server to carry out malicious attacks
  • Retrieving server files (including /etc/passwd etc)

This is example code in PHP that is vulnerable to SSRF:

You can read more from Acunetix here:

What is Server Side Request Forgery (SSRF)?

Posted in: Exploits/Vulnerabilities

, , ,


Latest Posts:


zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors
Memhunter - Automated Memory Resident Malware Detection Memhunter – Automated Memory Resident Malware Detection
Memhunter is an Automated Memory Resident Malware Detection tool for the hunting of memory resident malware at scale, improving threat hunter analysis process.
Sandcastle - AWS S3 Bucket Enumeration Tool Sandcastle – AWS S3 Bucket Enumeration Tool
Sandcastle is an Amazon AWS S3 Bucket Enumeration Tool, formerly known as bucketCrawler. The script takes a target's name as the stem argument (e.g. shopify).
Astra - API Automated Security Testing For REST Astra – API Automated Security Testing For REST
Astra is a Python-based tool for API Automated Security Testing, REST API penetration testing is complex due to continuous changes in existing APIs.
Judas DNS - Nameserver DNS Poisoning Attack Tool Judas DNS – Nameserver DNS Poisoning Attack Tool
Judas DNS is a Nameserver DNS Poisoning Attack Tool which functions as a DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation.
dsniff Download - Tools for Network Auditing & Password Sniffing dsniff Download – Tools for Network Auditing & Password Sniffing
Dsniff download is a collection of tools for network auditing & penetration testing. Dsniff, filesnarf, mailsnarf, msgsnarf, URLsnarf, and WebSpy passively monitor a network


2 Responses to What You Need To Know About Server Side Request Forgery (SSRF)

  1. bughunter August 18, 2017 at 8:40 pm #

    https://github.com/cujanovic/SSRF-Testing

    • Darknet August 18, 2017 at 11:44 pm #

      Oh that’s nice, thanks!