SSRF in the Wild

Look, mommy! That one’s in an XXE!This is an analysis of publicly disclosed SSRF vulnerabilities. I will go into where these vulnerabilities were found, the criticality of these bugs, and the fixes implemented by the vendor after the report. The study that you are about to read is totally unscientific, uncomprehensive and mostly just done for fun. I will use the terms like “roughly” and “about hal

[efcl]

HackeroneのSSRF事例まとめ