--- title: "#ssrf articles | Hashnode" description: "Explore 53 articles tagged #ssrf on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/ssrf" --- Tag # #ssrf 53 posts · 6 followers [Excession Labs](https://hashnode.com/@excessionlabs) · [1d ago](https://hashnode.com/posts/ssrf-reproduce-bypass-and-fix-a-preview-endpoint/6af3c19ec86ae5551bad0419) ### [SSRF: reproduce, bypass, and fix a preview endpoint](https://excessionlabs.hashnode.dev/ssrf-reproduce-bypass-and-fix-a-preview-endpoint?utm_source=hashnode&utm_medium=feed) SSRF: reproduce, bypass, and fix a preview endpoint Server-side request forgery (SSRF) is a flaw where a server fetches a URL chosen by the caller, so the caller can reach hosts that only the server c 9 min read · [excessionlabs.hashnode.dev](https://excessionlabs.hashnode.dev/ssrf-reproduce-bypass-and-fix-a-preview-endpoint?utm_source=hashnode&utm_medium=feed) [Sina Rezaei](https://hashnode.com/@sinarezaei) · [Oct 30](https://hashnode.com/posts/your-ai-pentester-found-an-ssrf-can-it-reproduce-the-attack/6ae3e417acc4ad96b8f4429a) ### [Your AI Pentester Found an SSRF. Can It Reproduce the Attack?](https://sinarezaei.hashnode.dev/your-ai-pentester-found-an-ssrf-can-it-reproduce-the-attack?utm_source=hashnode&utm_medium=feed) The first scan found an SSRF. The second one didn't. I wouldn't close the finding just yet. The endpoint accepts a URL, fetches the resource, and returns its response. During the first scan, the agent 3 min read · [sinarezaei.hashnode.dev](https://sinarezaei.hashnode.dev/your-ai-pentester-found-an-ssrf-can-it-reproduce-the-attack?utm_source=hashnode&utm_medium=feed) [Anusha Dirisala](https://hashnode.com/@anushadirisala) · [Oct 7](https://hashnode.com/posts/your-paste-a-url-feature-is-an-ssrf-waiting-to-happen/6ac6541ceb2eea80196fac73) ### [Your "Paste a URL" Feature Is an SSRF Waiting to Happen](https://anushadirisala.hashnode.dev/your-paste-a-url-feature-is-an-ssrf-waiting-to-happen?utm_source=hashnode&utm_medium=feed) I wrote this article with help from an AI assistant, then reviewed, tested and edited it myself. Link previews. Webhook endpoints. "Import from URL." Avatar uploads by link. PDF generators that fetch 5 min read · [anushadirisala.hashnode.dev](https://anushadirisala.hashnode.dev/your-paste-a-url-feature-is-an-ssrf-waiting-to-happen?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 7](https://hashnode.com/posts/tryhackme-seasurfer-writeup/6ac62062bef3e29f7cefc1f4) ### [TryHackMe - SeaSurfer writeup](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) Complete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 7](https://hashnode.com/posts/tryhackme-md2pdf-writeup/6ac62e4943b60b4fe90cb799) ### [TryHackMe: MD2PDF Writeup](https://exploitnotes.hashnode.dev/tryhackme-md2pdf-writeup?utm_source=hashnode&utm_medium=feed) MD2PDF TryHackMe writeup covering HTML injection, SSRF, localhost access control bypass, internal admin access, and flag disclosure. 9 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-md2pdf-writeup?utm_source=hashnode&utm_medium=feed) [Trust Boundary](https://hashnode.com/@trustboundarystudio) · [Sep 16](https://hashnode.com/posts/the-capital-one-breach-was-not-an-ssrf-story/6aa9f19844097d576b210452) ### [The Capital One breach was not an SSRF story](https://trustboundarystudio.hashnode.dev/the-capital-one-breach-was-not-an-ssrf-story?utm_source=hashnode&utm_medium=feed) Everyone remembers the server-side request forgery. The regulator's findings never mention it. What the OCC actually penalised was risk assessment and internal audit. 9 min read · [trustboundarystudio.hashnode.dev](https://trustboundarystudio.hashnode.dev/the-capital-one-breach-was-not-an-ssrf-story?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 25](https://hashnode.com/posts/hacksmarter-casino-writeup/6a8d92c3fd8f07aabbc31d74) ### [HackSmarter - Casino Writeup](https://exploitnotes.hashnode.dev/hacksmarter-casino-writeup?utm_source=hashnode&utm_medium=feed) Summary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest 11 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hacksmarter-casino-writeup?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Aug 18](https://hashnode.com/posts/server-side-request-forgery-security-architect-s-perspective-part-2/6a8410e6180319c7dd4d3430) ### [Server-Side Request Forgery: Security Architect's Perspective (Part 2)](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) A security architect's guide to SSRF threat modeling, egress controls, cloud metadata hardening, compliance, metrics, and incident response. 17 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/server-side-request-forgery-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 11](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) ### [TryHackMe : The London Bridge writeup](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) TryHackMe London Bridge walkthrough covering SSRF, loopback bypass, root HTTP server, SSH key theft, symlink abuse, and Firefox credential recovery. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) [Milan Nikic](https://hashnode.com/@nick79) · [Aug 4](https://hashnode.com/posts/server-side-request-forgery-in-java-and-spring-secure-coding-patterns/6a71dbbda9313e2c32dcd936) ### [Server Side Request Forgery in Java and Spring: Secure Coding Patterns](https://securitydepth.hashnode.dev/server-side-request-forgery-in-java-and-spring-secure-coding-patterns?utm_source=hashnode&utm_medium=feed) Learn how to prevent SSRF in Java 25 and Spring 7 with URL validation, IP filtering, bounded responses, and DNS-safe HTTP clients. 20 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/server-side-request-forgery-in-java-and-spring-secure-coding-patterns?utm_source=hashnode&utm_medium=feed)