datacoconut
Programs
AboutSign in
LabsCoursesConceptsVideosAcademy
← All courses
ExpertServer-side request forgery (SSRF)

Server-Side Request Forgery

SSRF turns a helpful feature into a window onto the internal network. This path goes from a link-preview you can aim, to the cloud metadata endpoint, to chaining a redirect into a private range.

Syllabus

  1. 1Understanding SSRFReading10 min
  2. 2Lab: the link-preview that fetches anythingLab45 min
  3. 3Lab: reaching the metadata endpointLab90 min
datacoconut
© 2026 datacoconut · All rights reserved