Samadhan shimple·4d agoSSRF Bug Bounty Methodology: A Practical Hunting Guide | by Samadhan ShimpleServer-Side Request Forgery (SSRF) is one of the web security vulnerabilities I find particularly interesting because it can be hidden…
Samadhan shimple·Oct 28I Found SSRF in 30 Minutes: Here’s My Exact Bug Bounty Workflow (Complete Guide) | by Samadhan…Server-Side Request Forgery (SSRF) is a web security vulnerability that occurs when an application makes a server-side request using input…
Samadhan shimple·Oct 19SSRF to Full Compromise: How One Bug Exposes Everything | by Samadhan ShimpleA practical guide to understanding SSRF, finding potential vulnerabilities, assessing their impact, and preventing them.
InMeetCyberbySamadhan shimple·Oct 9How I Found a Blind SSRF Through a Referer Header — Here’s How I Confirmed It | by Samadhan ShimpleWhile testing a web application’s password-reset functionality, I noticed something that initially looked completely ordinary: a Referer…
Sivanesan M·Sep 29I Asked “What is OAST?” and Fell Down a Rabbit Hole — Here’s What I LearnedA few days ago, I stumbled across a term in a bug bounty write-up: OAST payload. I had no clue what it meant, so I did what anyone would do…
Ömer Habip·Aug 4The Server Is a Servant: SSRF in LabsLast time in The Server Is a Servant, I got an XML parser to fetch things on my behalf, and it ended on a single change: swap file:// for…
CyberPodcast·Jul 8CVE-2026–10107: SSRF in MoviePilot v2 Image Proxy EndpointA newly disclosed vulnerability, tracked as CVE-2026–10107, affects MoviePilot v2, an open-source media automation and management project…
ShadowForge·May 22Building Another Vulnerable Lab — SSRF.The previous blog was something that some of you really liked, I did say it was a series so reason enough to do a part two. In this blog…
InInfoSec Write-upsbySana Jalil·May 22SSRF in APIs: How a Single URL Parameter Can Expose Internal SystemsA single misconfigured URL parameter can allow an attacker to abuse server-side requests and potentially access internal services, cloud…A response icon1A response icon1
Krutika·May 1SERVER-SIDE REQUEST FORGERY (SSRF) in crAPIOne of the dangerous vulnerabilities in API security is Server-Side Request Forgery (SSRF). It is categorized as API7: Server Side Request…
