About 51 results
Open links in new tab
  1. Server-side request forgery (SSRF) - PortSwigger

    What is SSRF? Server-side request forgery is a web security vulnerability that allows an attacker to cause the server-side application to make requests to an unintended location. In a typical SSRF …

  2. Server-side request forgery (SSRF) attacks - PortSwigger

    Server-side request forgery (SSRF) attacks This learning path teaches you about server-side request forgery (SSRF). You'll learn about its impact, common techniques used in attacks, and how to defend …

  3. Testing for SSRF with Burp Suite - PortSwigger

    Mar 18, 2026 · Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location. SSRF …

  4. Blind SSRF vulnerabilities | Web Security Academy - PortSwigger

    Blind SSRF vulnerabilities In this section, we'll explain what blind server-side request forgery is, describe some common blind SSRF examples, and explain how to find and exploit blind SSRF vulnerabilities. …

  5. Testing for SSRF vulnerabilities with Burp Suite - PortSwigger

    Mar 18, 2026 · Server-side request forgery (SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location.

  6. Lab: Basic SSRF against the local server - PortSwigger

    Server Side Request Forgery - SSRF. What is it? How does it work? Basic SSRF against local server. - YouTube Server Side Request Forgery - SSRF. What is it? How does it work? Basic SSRF against …

  7. Cross-site request forgery (CSRF) - PortSwigger

    Cross-site request forgery (CSRF) This learning path covers CSRF (Cross-Site Request Forgery). You'll learn about some common CSRF vulnerabilities, and how to prevent them.

  8. Server-side vulnerabilities - PortSwigger

    Server-side request forgery (SSRF) SSRF vulnerabilities enable an attacker to trigger malicious server-to-server requests to unintended URLs. As the server issuing the request is likely to have a strong …

  9. XSS vs CSRF | Web Security Academy - PortSwigger

    XSS vs CSRF In this section, we'll explain the differences between XSS and CSRF, and discuss whether CSRF tokens can help to prevent XSS attacks. What is the difference between XSS and …

  10. URL validation bypass cheat sheet - PortSwigger

    URL validation bypass cheat sheet This cheat sheet contains payloads for bypassing URL validation. These wordlists are useful for attacks such as server-side request forgery, CORS misconfigurations, …