SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps

guest · Feb 24, 2020

SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps
February 24, 2020
https://www.darkreading.com/edge/th...ery-sneaks-past-your-web-apps-/b/d-id/1337121

When it's time to talk attacks, it's hard to get more evil than a technique that uses victims' own systems against them. Server-side request forgery (SSRF) is one of those evil attacks, and it's one that cybersecurity pros should be able to recognize if they want to minimize the danger from within.

In an SSRF, the attacker uses the capabilities of the Web server to be tools in the attack itself. And because the Web server tends to be behind the corporate firewall, those attacks can operate without the security scrutiny that external requests and payloads would receive.
It's also becoming a big problem for cloud providers — and therefore for cloud users.

Given the danger, and the modern requirement to have Web-based application servers open to large user populations, what can be done to keep infrastructures safe? As it turns out, several safety options are available to both software developers and security professionals.
Click to expand...

Log in or Sign up

SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps

guest Guest

Log in or Sign up

SSRF 101: How Server-Side Request Forgery Sneaks Past Your Web Apps

guest Guest

Useful Searches