also SQL injection, SSRF, and more
September 24, 2026 at 10:21 AM
also SQL injection, SSRF, and more
did you know nginx can reverse-proxy to a local unix-domain socket?
never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or...
never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or...
November 20, 2024 at 1:36 AM
did you know nginx can reverse-proxy to a local unix-domain socket?
never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or...
never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or...
March 29, 2026 at 11:34 AM
Tempos atrás criei um pacote JS chamado ssrfcheck que é capaz de verificar ESTATICAMENTE (não verifica DNS) se uma URL qualquer possui em sua morfologia uma tentativa de ataque SSRF - hoje chegou até mim um report da SNYKs que esse pacote sofreu bypass +
gist.github.com/lirantal/297...
gist.github.com/lirantal/297...
SSRF Bypass in `ssrfcheck` - fails to classify reserved IP address space as invalid
SSRF Bypass in `ssrfcheck` - fails to classify reserved IP address space as invalid - ssrf-bypass-in-ssrfcheck.md
gist.github.com
June 25, 2025 at 4:47 AM
Tempos atrás criei um pacote JS chamado ssrfcheck que é capaz de verificar ESTATICAMENTE (não verifica DNS) se uma URL qualquer possui em sua morfologia uma tentativa de ataque SSRF - hoje chegou até mim um report da SNYKs que esse pacote sofreu bypass +
gist.github.com/lirantal/297...
gist.github.com/lirantal/297...
the real takeaway from the huggingface incident was that bros will literally SSRF through an RCE via a ruby gems repo just to avoid using Jira
August 9, 2026 at 9:46 PM
the real takeaway from the huggingface incident was that bros will literally SSRF through an RCE via a ruby gems repo just to avoid using Jira
I’ve to say that I’m impressed by how @xbow.com managed to identify this SSRF vulnerability (and bypass a MIME filter on its way) 🤖
XBOW – SSRF & URI validation bypass in 2FAuth
XBOW discovered a Server-Side Request Forgery (SSRF) vulnerability in the OTP preview feature of the open-source project, 2FAuth.
xbow.com
November 24, 2024 at 2:38 PM
I’ve to say that I’m impressed by how @xbow.com managed to identify this SSRF vulnerability (and bypass a MIME filter on its way) 🤖
is it just me or is the internet completely flooded with bad advice on how to mitigate SSRF?
December 23, 2024 at 9:24 PM
is it just me or is the internet completely flooded with bad advice on how to mitigate SSRF?
atproto/identityだとSSRF対策が入ってなくて、internal以下のatproto-labs/did-resolverには入ってる(というかfetchを上書きする形で出来る)ことを最近知った
atproto-labsはいつか正式版に昇格すんのかな
atproto-labsはいつか正式版に昇格すんのかな
September 21, 2026 at 1:56 PM
Bug Bounty Tip
SSRF: PDF iframe Injection
Cheers!
SSRF: PDF iframe Injection
Cheers!
December 5, 2024 at 2:24 PM
Bug Bounty Tip
SSRF: PDF iframe Injection
Cheers!
SSRF: PDF iframe Injection
Cheers!
OpenAI: “Our agents used RubyGems to carry out benign tasks”
The agents: “so I named the file hack.rb,”
The agents: “so I named the file hack.rb,”
September 12, 2026 at 1:26 AM
OpenAI: “Our agents used RubyGems to carry out benign tasks”
The agents: “so I named the file hack.rb,”
The agents: “so I named the file hack.rb,”
Outra lib que gostei de criar (e fico feliz pq ela é utilizada em algumas empresas BEM gigantes por aí e que aliás não posso citar rs) foi esse SSRF Checker. essa lib checa anotações de endereços estáticos e aponta possíveis ataques SSRF na URL, via código ou CLI:
www.npmjs.com/package/ssrf...
www.npmjs.com/package/ssrf...
ssrfcheck
Check if a string contains a potential SSRF attack. Latest version: 1.1.1, last published: a year ago. Start using ssrfcheck in your project by running `npm i ssrfcheck`. There are no other projects i...
www.npmjs.com
December 13, 2024 at 8:33 PM
Outra lib que gostei de criar (e fico feliz pq ela é utilizada em algumas empresas BEM gigantes por aí e que aliás não posso citar rs) foi esse SSRF Checker. essa lib checa anotações de endereços estáticos e aponta possíveis ataques SSRF na URL, via código ou CLI:
www.npmjs.com/package/ssrf...
www.npmjs.com/package/ssrf...
Can we tell that SSRF is an IDOR?
August 17, 2023 at 12:04 AM
Can we tell that SSRF is an IDOR?
I love that questions about ssrf are becoming more frequent internally.
And that the answer usually upsets people.
And that the answer usually upsets people.
July 22, 2025 at 1:03 PM
I love that questions about ssrf are becoming more frequent internally.
And that the answer usually upsets people.
And that the answer usually upsets people.
Want to learn how to hack JavaScript based apps?
Check out my guide on GETTING HANDS-ON WITH SSRF bypasses and the pitfalls of denylists:
Check out my guide on GETTING HANDS-ON WITH SSRF bypasses and the pitfalls of denylists:
An Introduction to SSRF Bypasses and Denylist Failures
Getting hands-on with SSRF bypasses and the pitfalls of denylists.
www.nodejs-security.com
June 16, 2025 at 9:00 AM
Want to learn how to hack JavaScript based apps?
Check out my guide on GETTING HANDS-ON WITH SSRF bypasses and the pitfalls of denylists:
Check out my guide on GETTING HANDS-ON WITH SSRF bypasses and the pitfalls of denylists:
Dive into a critical SSRF vulnerability in a popular npm package called `nossrf`
Bypassing SSRF Protection in nossrf: When Your Safeguards Become Loopholes
Dive into a critical vulnerability in a popular npm package called `nossrf`. This package aims to shield applications from Server-Side Request Forgery (SSRF) attacks by validating user-provided URLs. However, a clever bypass technique renders these safeguards ineffective. Let's dissect the issue and understand how to stay protected.
www.nodejs-security.com
July 2, 2025 at 9:00 AM
Dive into a critical SSRF vulnerability in a popular npm package called `nossrf`
oh SSRF btw
you can do the same with .well_known/_appname the same as bluesky
create an api in your appview that does domain verification
all it does is it gets a domain and checks if that domain is claimed and still valid in your db
app.get("/api/check-domain") => domain = c.req.query("domain")
create an api in your appview that does domain verification
all it does is it gets a domain and checks if that domain is claimed and still valid in your db
app.get("/api/check-domain") => domain = c.req.query("domain")
October 12, 2025 at 9:02 AM
oh SSRF btw
New blog post by @nicowaisman.bsky.social on how XBOW found an SSRF in the OTP app 2FAuth (CVE-2024-52598) is now live! xbow.com/blog/xbow-2f...
XBOW – SSRF & URI validation bypass in 2FAuth
XBOW discovered a Server-Side Request Forgery (SSRF) vulnerability in the OTP preview feature of the open-source project, 2FAuth.
xbow.com
November 22, 2024 at 4:46 PM
New blog post by @nicowaisman.bsky.social on how XBOW found an SSRF in the OTP app 2FAuth (CVE-2024-52598) is now live! xbow.com/blog/xbow-2f...
how do you mitigate SSRF when resolving did:web? validate the json before parsing?
October 12, 2025 at 2:38 AM
how do you mitigate SSRF when resolving did:web? validate the json before parsing?
300 lines of Python for testing SSRF: injects payloads, uses a collaborator host to catch callbacks. Advanced level. https://www.valtersit.com/python/ssrf-server-side-request-forgery-tester/ #security #python #ssrf
SSRF (Server-Side Request Forgery) Tester
www.valtersit.com
September 24, 2026 at 7:30 AM
300 lines of Python for testing SSRF: injects payloads, uses a collaborator host to catch callbacks. Advanced level. https://www.valtersit.com/python/ssrf-server-side-request-forgery-tester/ #security #python #ssrf
glossary for non coders:
ssrf: server side request forgery, lets you use a different computer (server) to pass messages/traffic
package manager: app store for coders
CVE: security bug
artifactory: a common package manager
0-day: a security bug nobody else knows about yet (which makes it useful)
ssrf: server side request forgery, lets you use a different computer (server) to pass messages/traffic
package manager: app store for coders
CVE: security bug
artifactory: a common package manager
0-day: a security bug nobody else knows about yet (which makes it useful)
If you have more than even a passing interest in AI, watching this talk is more important than whatever it is you are currently doing. There’s a lot of cybersec jargon at times but I don’t think you need to know anything about security to understand what’s important.
youtu.be/87DyyMV0kCY
youtu.be/87DyyMV0kCY
Black Hat USA 2026: The 'Breaking' News: The OpenAI–Hugging Face Incident
YouTube video by Black Hat
youtu.be
August 7, 2026 at 5:22 AM
glossary for non coders:
ssrf: server side request forgery, lets you use a different computer (server) to pass messages/traffic
package manager: app store for coders
CVE: security bug
artifactory: a common package manager
0-day: a security bug nobody else knows about yet (which makes it useful)
ssrf: server side request forgery, lets you use a different computer (server) to pass messages/traffic
package manager: app store for coders
CVE: security bug
artifactory: a common package manager
0-day: a security bug nobody else knows about yet (which makes it useful)
I shouldn't be so smug that my SSRF nuget package has 4000% times the number of downloads as Microsoft AntiSSRF but I am.
May 11, 2026 at 12:33 PM
I shouldn't be so smug that my SSRF nuget package has 4000% times the number of downloads as Microsoft AntiSSRF but I am.
Privileged localhost-only apis are a bit scary if someone ever gets SSRF, one mitigation is to use unix domain sockets for internal stuff
March 16, 2026 at 2:06 AM
Privileged localhost-only apis are a bit scary if someone ever gets SSRF, one mitigation is to use unix domain sockets for internal stuff
Protecting your .NET app from Server-Side Request Forgery (SSRF) vulnerabilities.
Protecting your .NET app from Server-Side Request Forgery (SSRF) vulnerabilities.
A couple of weeks ago a friend asked what Server-Side Request Forgery (SSRF) was, how worried they should be, and how to fix it, as GitHub Copilot had told them that their application was vulnerable. This sent me down a rabbit hole thinking about my own .NET Bluesky SDK and how to protect that. Only one NuGet package claimed to address SSRF, and it hadn't been updated in years.
So, what's the risk to your applications and what can you do about it?
What is SSRF?
In short: SSRF is what happens
idunno.org
March 30, 2026 at 5:49 PM
Protecting your .NET app from Server-Side Request Forgery (SSRF) vulnerabilities.
It's amazing how important one Phrack article from 27 years ago has been for web application security.
Covering what we now call SQL Injection and SSRF (amongst other things) problems we're still trying to handle today laid out in a couple of paragraphs
phrack.org/issues/54/8#...
Covering what we now call SQL Injection and SSRF (amongst other things) problems we're still trying to handle today laid out in a couple of paragraphs
phrack.org/issues/54/8#...
.:: Phrack Magazine ::.
Phrack staff website.
phrack.org
March 27, 2025 at 9:42 AM
It's amazing how important one Phrack article from 27 years ago has been for web application security.
Covering what we now call SQL Injection and SSRF (amongst other things) problems we're still trying to handle today laid out in a couple of paragraphs
phrack.org/issues/54/8#...
Covering what we now call SQL Injection and SSRF (amongst other things) problems we're still trying to handle today laid out in a couple of paragraphs
phrack.org/issues/54/8#...
(also do you mitigate SSRF, I'm having fun with that right now)
December 23, 2024 at 6:58 PM
(also do you mitigate SSRF, I'm having fun with that right now)