New crazy payloads in the URL Validation Bypass Cheat Sheet
portswigger.net | research | #burp-suite | #ssrf | #cheat-sheet | #spring | #url-validation | #ip-encoding
Summary
URL Validation Bypass Cheat Sheet adds IP formats — partial decimal, mixed encodings, IPv6 — and a userinfo payload that makes Spring misparse hosts, enabling SSRF and open redirect.
- Published
- Collected
--- id: 5051 title: "New crazy payloads in the URL Validation Bypass Cheat Sheet" source_domain: portswigger.net source_url: "https://portswigger.net/research/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet" published_at: "2024-11-22 09:06" tags: ["burp-suite", "ssrf", "cheat-sheet", "spring", "url-validation", "ip-encoding"] phying_url: "https://phying.com/item/5051" lang: en --- # New crazy payloads in the URL Validation Bypass Cheat Sheet ## Summary URL Validation Bypass Cheat Sheet adds IP formats — partial decimal, mixed encodings, IPv6 — and a userinfo payload that makes Spring misparse hosts, enabling SSRF and open redirect. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2024-11-22 09:06 - **Original:** https://portswigger.net/research/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet - **Phying News:** https://phying.com/item/5051