The server that talked back: a deep dive into SSRFs
summary
Covers Server-Side Request Forgery (SSRF) vulnerabilities, starting from basic SSRF examples and progressing to advanced cases. Includes concrete real-world bugs and bypasses found in products such as Microsoft Azure, and demonstrates how SSRFs can be used to bypass access controls, reach internal resources, or obtain cloud credentials.
AI-written summary · about
related talks
47mKeynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking
50mA New Era of SSRF - Exploiting URL Parser in Trending Programming Languages!
01h 04mServer-Side Browsing Considered Harmful
41mCloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972)
36mCSRF Vulnerabilities Are Still Relevant
58mModern web application bugs
18mCORS, XSS, CSRF, SQL injection #BackToTheBasics
19mFrontend Security is a Thing