HOW TO FIND SSRF'S?
A full guide on finding SSRF's in bug bounty

HOW TO FIND SSRF'S?

Eman ?ati? Eman ?ati?

Eman ?ati?

.

发布日期: 2024年1月14日
+ 关注

WHAT IS IT?

Tricking a website to make unintended requests to internal resources.


WHERE TO FIND IT?

The following are the most common parts where SSRF's can be found:

  • URL Parsing & Processing
  • File Upload Features


HOW TO FIND SSRF's?

Utilize these payloads to exploit SSRF's:

________________________

?? Follow my newsletter for more tips on crushing bug bounties in 2024!

?? Contact me: [email protected]



Weekly Bug Bounty Weekly Bug Bounty

Weekly Bug Bounty

3,295 位关注者

订阅

要查看或添加评论，请登录

Eman ?ati?的更多文章

  • Exclusive Community Invitation
    2024年7月10日

    Exclusive Community Invitation

    I'm officially opening the first Patreon community for bug bounty hunters. I worked hard to create valuable posts to…

  • The XSS Handbook
    2024年7月9日

    The XSS Handbook

    I've just released my first handbook that will guide you to learning how to hunt for XSS vulnerabilities. This…

    3 条评论
  • How to pick a bug bounty program?
    2024年5月16日

    How to pick a bug bounty program?

    Introduction When starting your bug bounty journey, most people's struggles are picking the "perfect" bug bounty…

    3 条评论
  • How to use AI tools securely? (without doxxing your company)
    2024年4月12日

    How to use AI tools securely? (without doxxing your company)

    As software development teams increasingly adopt artificial intelligence (AI) tools, they gain access to powerful…

    1 条评论
  • How To Use Amass? (like a pro)
    2024年3月3日

    How To Use Amass? (like a pro)

    In this newsletter edition I will shine a light on a tool I that many know about but very few know how to use…

    1 条评论
  • Shodan: Hidden Bug Bounty Tool
    2024年2月4日

    Shodan: Hidden Bug Bounty Tool

    What is Shodan? Shodan is a search engine for Internet-connected devices and a powerful tool for bug hunters. It…

  • How to hack using Google?
    2024年1月28日

    How to hack using Google?

    What is Google Dorking? Technique of utilizing Google search keywords and functions to obtain sensitive information and…

  • How to hack using Google?
    2024年1月22日

    How to hack using Google?

    What is Google Dorking? Technique of utilizing Google search keywords and functions to obtain sensitive information and…

  • How to hack using Google?
    2024年1月19日

    How to hack using Google?

    What is Google Dorking? Technique of utilizing Google search keywords and functions to obtain sensitive information and…

  • How to enumerate JS files?
    2024年1月18日

    How to enumerate JS files?

    Why? A lot of sensitive information is exposed through JS files. There is always a chance a developer made a mistake.

    1 条评论

社区洞察

其他会员也浏览了