Technique
technique:ssrf
Also: server-side request forgery
Server-side request forgery findings reported across multiple endpoints in the Nexus RF program.
Server-side request forgery findings reported across multiple endpoints in the Nexus RF program.
“bypass the blacklist in a total of fifteen or sixteen different end points for SSRF”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Tommy DeVoss | Explicit | 60 |
Tommy DeVoss USES SSRF
Tommy used the blacklist bypass across multiple endpoints for SSRF testing.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I ended up being able to bypass the blacklist in a total of fifteen or sixteen different end points for SSRF”