---
id: 4278
title: "Vulnerable by Design: Understanding Server-Side Request Forgery"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/understanding-server-side-request-forgery"
published_at: "2015-04-18T00:00:00Z"
tags: ["web-security", "research", "ssrf", "same-origin-policy", "cross-domain-proxy"]
phying_url: "https://phying.com/item/4278"
lang: en
---

# Vulnerable by Design: Understanding Server-Side Request Forgery

## Summary

Mike Brooks explains server-side request forgery via the same-origin policy: a cross-domain proxy built to bypass SOP becomes an SSRF vector when it can reach internal, unreachable resources.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2015-04-18T00:00:00Z
- **Original:** https://bishopfox.com/blog/understanding-server-side-request-forgery
- **Phying News:** https://phying.com/item/4278