3 ms·
I'm glad SSRF is getting more attention. It's incredibly potent, especially in cloud/k8s/micro services eras. Some good examples: - From screenshot service to
by brasetvik 5y ago
I'm glad SSRF is getting more attention. It's incredibly potent, especially in cloud/k8s/micro services eras.
Some good examples:
- From screenshot service to Kubernetes account takeover at Shopify: https://hackerone.com/reports/341876 https://hackerone.com/reports/341876
- SSRF and the Capital One breach: https://blog.appsecco.com/an-ssrf-privileged-aws-keys-and-the-capital-one-breach-4c3c2cded3af https://blog.appsecco.com/an-ssrf-privileged-aws-keys-and-th...
- kerng 5y agoAgreed, the common lack of authentication and authorization make it a nightmare with microservice deployments.