---
id: 3590
title: "How To: Server-Side Request Forgery (SSRF)"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-server-side-request-forgery-ssrf"
published_at: "2017-06-14T18:00:00Z"
tags: ["ruby", "web-security", "tutorial", "ssrf", "sinatra"]
phying_url: "https://phying.com/item/3590"
lang: en
---

# How To: Server-Side Request Forgery (SSRF)

## Summary

Server-Side Request Forgery (SSRF) tutorial: using a vulnerable Ruby/Sinatra app, it covers the impact, how to test for SSRF, pivots into internal networks, defeating mitigations and caveats.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2017-06-14T18:00:00Z
- **Original:** https://www.hackerone.com/blog/how-server-side-request-forgery-ssrf
- **Phying News:** https://phying.com/item/3590