SSRF: A COMPLETE GUIDE TO EXPLOITING ADVANCED SSRF VULNERABILITIES

Summary from the TLDR InfoSec newsletter

This is a guide on exploiting SSRF vulnerabilities. It begins by explaining what SSRFs are and how to exploit basic SSRF vulnerabilities before discussing how to bypass common defenses like host and protocol allowlisting. The guide then provides an introduction to some advanced SSRFs like SSRFs in PDF generators, second order SSRFs, blind SSRFs, and SSRFs via DNS rebinding.