How to exploit a blind SSRF?

Опубликовано: 16 Ноябрь 2021
на канале: Intigriti

25,121

759

👩‍🎓👨‍🎓 Today, we are going to dive deeper into SSRF by exploiting a blind one using ShellShock in an example lab.

Overview:
00:00 Introduction
00:15 Checking out the webshop
00:25 Getting a request in Burp
00:50 Sending request to Repeater
01:10 Referer header
02:00 Getting Burp collaborator link
02:30 Blind SSRF
03:30 How to exploit blind SSRFs
04:00 ShellShock
05:10 Scanning internal network using Intruder
07:30 Getting RCE using ShellShock
09:00 Outro

For more information, check out https://blog.intigriti.com/hackademy/....

🔗 Portswigger XXS Challenge: https://portswigger.net/web-security/...

---

🧑‍💻 Sign up and start hacking right now - https://go.intigriti.com/register

👾 Join our Discord - https://go.intigriti.com/discord

🎙️ This show is hosted by / pinkdraconian ( @PinkDraconian ) & / intigriti

👕 Do you want some Intigriti Swag? Check out https://swag.intigriti.com/