Find and Exploit Server-Side Request Forgery (SSRF)

00:00 Intro
00:36 How SSRF works
01:38 SSRF Lab
06:06 Finding SSRF
06:52 Avoid reporting false positives!
07:09 Scanning & fuzzing for SSRF
07:37 Blind SSRF
08:39 Outro

📱Social Media📱
___________________________________________

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:

Hacker Books:

My Build:

My Recording Equipment:

[TheIvalen]

Well scripted and executed. I am liking these ‘byte’ sized tutorials and concept explanations. Very focused and worthwhile.

[weidup]

This is amazingly done, what a great explanation in just 9 minutes. Awesome job guys, keep up the great work!

[stevero]

Absolutely love the content. I've had issues understanding SSRI. Just wasn't make much sense. Until now. Please release more of this content!! 110% support

[nblinthemix]

What a nice video! Keep up the good work!

[sinisivasankaran]

Extremely informative, detailed and to the point. Many thanks for this video.

[kartiksharma]

This type of series is good. Keep it up.. 👍👍👍

[Znd]

External Service Interaction y Blind SSRF, real stuff. I found those on a pentest recently. DDDifficult to get evidence for impact. Thanks for the video!

[googleadmin]

In one of the videos, I watched a browser extension to change the proxy, as a result, now on Linux I can't bring these proxies back in the update program after deleting the extension, can you remind me which extension the author uses?

[sebastiaanrothman]

Please for the love of all things good, create a full course at this level. I've been looking for something that actually explains these things at this level as opposed to just running through a demo, making things happen and not actually explaining what's happening.

[eyezikandexploits]

Just found a ssrf on a vdp but camt seem to find anyway to make use of it

[AnthonyMcqueen]

You should do i video on the SSRF tool called SSRFMap

[abhipandit]

Sir, when do I want to download this video, please tell me how?

[physicsyeah]

HOW TO MAKE Phishing SIT CAN YOU make right video on it please

[indianfromsouth]

Came in here to see Heath but got a very good video none the less 😊 🤠 Good content and explanation sir 🙂 a humble request to make a video on new tools like nuclei, rustscan, feroxbuster and so on 🙏 Basically tools made off Rust or Go rather than python 👍