Ssrf | Classroom

TryHackMe Juicy: XSS to SSRF via unsanitised LLM output

Attacking LLMs

Juicy: XSS to SSRF via unsanitised LLM output

TryHackMe Sequence: stored XSS to Docker socket escape

stored XSS

Sequence: stored XSS to Docker socket escape

TryHackMe Extract: gopher SSRF to middleware bypass

SSRF

Extract: gopher SSRF to middleware bypass

TryHackMe Source Code Review PHP: XXE to deserialization RCE

PHP

Source Code Review PHP: XXE to deserialization RCE

TryHackMe WebSocket Request Smuggling: proxy bypass via fake upgrades

WebSocket smuggling

WebSocket Request Smuggling: proxy bypass via fake upgrades

TryHackMe Include: from property injection to log poisoning RCE

SSRF

Include: from property injection to log poisoning RCE

TryHackMe SSRF: forging requests from the server side

SSRF

SSRF: forging requests from the server side

TryHackMe XXE Injection: File Read, SSRF, and Exfiltration

Web Application Pentesting

XXE Injection: File Read, SSRF, and Exfiltration

TryHackMe Cloud Security Fundamentals: SSRF to IMDS Chain

Cloud Security

Cloud Security Fundamentals: SSRF to IMDS Chain

PortSwigger Web Security Academy Labs

portswigger

20 PortSwigger Labs: SSTI to Access Control