Web App Attacks

SSRF

Chapter 5 of 12 · Web App Attacks 41%
Hands-on Lab

URL Scanner

Practice what you learn in this chapter! This dedicated lab gives you a real vulnerable server to legally exploit using the exact techniques from this chapter.

Challenge 50 XP 1 flag 85% success
Skills You'll Practice:
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
Pro Lab
Create Free Account

☁️ Capital One's 2019 SSRF breach exposed 106M records from AWS metadata, could you replicate the attack path?

SSRF turns web servers into proxies for 169.254.169.254, IMDSv2 bypass, and allowlist evasion to steal cloud credentials before attackers hit your infrastructure 🌩️

Premium Chapter

Create a free account to access this chapter and start learning with hands-on labs.

Create Free Account

Join 7,000+ cybersecurity learners

Ready to track your progress?

Create a free account to save your progress, earn XP, and access 170+ hands-on cybersecurity labs.

Start Learning Free

Course Progress

Track your learning journey

0 /12
0 % Complete
12 Remaining
Course Chapters

No chapters found for this filter

13,000+ Hackers 100+ Labs & Courses Free
Start Hacking Free