3 ms·
Have you demonstrated SSRF on a server that is not running insecure or untrusted code (i.e. is not already compromised)? We have yet to see this, but if we do
by mholt 3y ago
Have you demonstrated SSRF on a server that is not running insecure or untrusted code (i.e. is not already compromised)?
We have yet to see this, but if we do see a practical demonstration, we're happy to reconsider.
- rekoil 3y agoYou've never seen an application with an SSRF vulnerability? I've encountered multiple working as a penetration tester.