Avatar

Labs / SSRF Validator

  • Daily Challenge
  • Released 02 Oct 2025

🌐 Can you trick the server into revealing its own secrets?

A seemingly secure URL validation service stands between you and sensitive internal data! 🔒 The server thinks it's safe behind its firewall, but clever request manipulation might just convince it to fetch data from places it shouldn't. 🕵️ Master the art of server-side request forgery and turn the server against itself! 💥

1
Flags
1
Points
Daily Challenge
Free Access
Start Lab Environment

Launch your dedicated AWS machine to begin hacking

~1-2 min setup
AWS dedicated
Private instance
Industry standard
Daily Challenge

Solution Coming Soon

The solution for this lab will be available on 12 Oct 2025 16:00 UTC.

To keep the new labs challenging for everyone, solutions are only available 1 month after a lab has been released or when it gets archived, whichever comes first.