ssrf | LaptrinhX / News

6 min read 2022-09-21 03:00:00

Defending against SSRF attacks (with help from our bug bounty program)

Over the past few years, server-side request forgery (SSRF) has received an increasing amount of attention from security researchers. With SSRF, an

1 min read 2021-10-13 14:12:58

Attackers use SSRF, a web application vulnerability, to bring about a request from the server-side application to a random domain; usually, attackers

1 min read 2021-10-11 20:03:48

Server-Side Request Forgery (SSRF)Image by Edgar Oliver from PixabayServer-side request forgeries (SSRF) occur when the web application sends a

1 min read 2021-09-27 16:00:00

My favorite part about Jarmis was that it is centered around this really neat technology used to fingerprint and identify TLS servers. There’s

1 min read 2021-08-07 20:45:00

Love was a solid easy-difficulty Windows box, with three stages. First, I’ll use a simple SSRF to get access to a webpage that is only allowed

1 min read 2021-05-29 20:45:00

Cereal was all about takign attacks I’ve done before, and breaking the ways I’ve previously done them so that I had to dig deeper and really

5 min read 2020-12-28 18:24:40

Vulmap is a vulnerability scanning tool that can scan for vulnerabilities in Web containers, Web servers, Web middleware, and CMS and other Web

1 min read 2020-12-07 21:18:42

In line with our constant desire to improve and offer the best service we can, Report URI recently went through an independent penetration test as

2 min read 2020-11-30 18:18:01

N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks

1 min read 2020-11-19 23:01:46

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point

1 min read 2020-10-19 17:10:05

Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale

16 min read 2020-09-05 07:00:00

Travel is an awesome box from my ATeam teammates xct and jkr. The box has a code review part where we analyze the source code of a PHP web app to

1 min read 2020-08-25 17:05:20

Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually

2 min read 2020-07-13 01:20:52

ParamSpider : Parameter miner for humans. Key Features : Finds parameters from web archives of the entered domain. Finds parameters from

9 min read 2020-07-04 07:00:00

Forwardslash starts off like most classic Hack The Box machines with some enumeration of vhosts, files and directories with gobuster then we use a