SSRF

acronym

securitycloudweb dev

Server-Side Request Forgery: tricking a server into making requests on the attacker's behalf - reaching internal addresses the attacker never could directly.

The technique behind the 2019 Capital One breach: one forged request to the metadata service, credentials out.

All glossary entries