Live briefing
Everything about Server-side request forgery
Type of computer security exploit
Server-side request forgery (SSRF) is a computer security vulnerability that enables an attacker to send requests from a vulnerable server to internal or external systems or the server itself. The vulnerability arises when server functionality can be manipulated to access or modify resources that are otherwise inaccessible. SSRF is listed among the most critical API security risks and is recognized as one of the most serious software weaknesses. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Server-side request forgeryA 5-minute orientation
- Pick up a classic book: The web application hacker's handbookThe most-reprinted book on the subject
- Read the landmark paper: Detecting Server-Side Request Forgery (SSRF) Attack by using Deep Learning TechniquesCited 15 times
- Go sideways: Application securityA closely related topic
- Go sideways: Path traversal attackA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Detecting Server-Side Request Forgery (SSRF) Attack by using Deep Learning Techniques
Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-procedural Path-Sensitive Taint Analysis
Server Side Protection against Cross Site Request Forgery using CSRF Gateway
A Hybrid Passive–Active Framework for Server-Side Request Forgery Detection Using Machine Learning
Penerapan Web Application Firewall Berbasis Mod Security untuk Mengatasi Server Side Request Forgery (SSRF)
📚 Books worth reading
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Application security Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve…
- Path traversal attack A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such…
- Webhook In web development, a webhook is a method of augmenting or altering the behavior of a web page or web application with custom callbacks. These callbacks…
- Cross-site request forgery Cross-site request forgery (CSRF, sometimes pronounced sea-surf) is a type of malicious exploit of a website or web application where unauthorized commands…
- Exploit (computer security) An exploit is a method or piece of code that takes advantage of vulnerabilities in software, applications, networks, operating systems, or hardware, typically…
- XML external entity attack XML External Entity attack, or simply XXE attack, is a type of attack against an application that parses XML input. This attack occurs when XML input containing…
- Web application firewall A Web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service.…
- Cross-site scripting Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side…