Server-side request forgery DISCOVERED_BY Tanya Janca
Tanya says she found server-side request forgery while testing an application.
Explicit Confidence 98% · Tanya Janca EP 165 Details
“I found server-side request forgery.”
Exploit
exploit:server_side_request_forgery
Also: SSRF
Exploit Tanya discovered while testing an application through an email field, causing server-side file operations and a production outage.
Exploit Tanya discovered while testing an application through an email field, causing server-side file operations and a production outage.
“I found server-side request forgery.”
“I started copying and deleting files on the web server”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Tanya Janca | Explicit | 165 |
| incoming | USES | Tanya Janca | Derived | 165 |
Server-side request forgery DISCOVERED_BY Tanya Janca
Tanya says she found server-side request forgery while testing an application.
Explicit Confidence 98% · Tanya Janca EP 165 Details
“I found server-side request forgery.”
Tanya Janca USES Server-side request forgery
While penetration testing, Tanya entered code that resulted in server-side request forgery and unintended file operations.
Derived Confidence 84% · Tanya Janca EP 165 Details
“Inadvertently, I started copying and deleting files on the web server.”
“I found server-side request forgery.”