
Server-side request forgery (SSRF) - PortSwigger
What is SSRF? Server-side request forgery is a web security vulnerability that allows an attacker to cause the server-side application to make requests to an unintended location. In a typical SSRF …
Server-side request forgery (SSRF) attacks - PortSwigger
Server-side request forgery (SSRF) attacks This learning path teaches you about server-side request forgery (SSRF). You'll learn about its impact, common techniques used in attacks, and how to defend …
Testing for SSRF with Burp Suite - PortSwigger
Mar 18, 2026 · Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location. SSRF …
Blind SSRF vulnerabilities | Web Security Academy - PortSwigger
Blind SSRF vulnerabilities In this section, we'll explain what blind server-side request forgery is, describe some common blind SSRF examples, and explain how to find and exploit blind SSRF vulnerabilities. …
Testing for SSRF vulnerabilities with Burp Suite - PortSwigger
Mar 18, 2026 · Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location.
Lab: Basic SSRF against the local server - PortSwigger
Server Side Request Forgery - SSRF. What is it? How does it work? Basic SSRF against local server. - YouTube Server Side Request Forgery - SSRF. What is it? How does it work? Basic SSRF against …
Cross-site request forgery (CSRF) - PortSwigger
Cross-site request forgery (CSRF) This learning path covers CSRF (Cross-Site Request Forgery). You'll learn about some common CSRF vulnerabilities, and how to prevent them.
Server-side vulnerabilities - PortSwigger
Server-side request forgery (SSRF) SSRF vulnerabilities enable an attacker to trigger malicious server-to-server requests to unintended URLs. As the server issuing the request is likely to have a strong …
XSS vs CSRF | Web Security Academy - PortSwigger
XSS vs CSRF In this section, we'll explain the differences between XSS and CSRF, and discuss whether CSRF tokens can help to prevent XSS attacks. What is the difference between XSS and …
URL validation bypass cheat sheet - PortSwigger
URL validation bypass cheat sheet This cheat sheet contains payloads for bypassing URL validation. These wordlists are useful for attacks such as server-side request forgery, CORS misconfigurations, …