Vulnerable by Design: Understanding Server-Side Request Forgery
bishopfox.com | research | #web-security | #research | #ssrf | #same-origin-policy | #cross-domain-proxy
Summary
Mike Brooks explains server-side request forgery via the same-origin policy: a cross-domain proxy built to bypass SOP becomes an SSRF vector when it can reach internal, unreachable resources.
- Published
- Collected
Skip to content