---
id: 5051
title: "New crazy payloads in the URL Validation Bypass Cheat Sheet"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet"
published_at: "2024-11-22 09:06"
tags: ["burp-suite", "ssrf", "cheat-sheet", "spring", "url-validation", "ip-encoding"]
phying_url: "https://phying.com/item/5051"
lang: en
---

# New crazy payloads in the URL Validation Bypass Cheat Sheet

## Summary

URL Validation Bypass Cheat Sheet adds IP formats — partial decimal, mixed encodings, IPv6 — and a userinfo payload that makes Spring misparse hosts, enabling SSRF and open redirect.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2024-11-22 09:06
- **Original:** https://portswigger.net/research/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet
- **Phying News:** https://phying.com/item/5051