Browse › Advanced Web Application Exploitation

Web 201 - Lab 8: Server Side Request Forgery
Part of Advanced Web Application Exploitation Topic: Web Hacking
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this example we will be faced with a web application that will simply open whatever resource you specify, with increasingly strict restrictions.
- However, in a real application, this issue will likely be a bit harder to find.
- It might surface in an application that is acting as a proxy for some resource or it might simply be retrieving resources from a private network.
- In any case, some of the restrictions that we will explore may be natural restrictions based on how the application is implemented, or may be steps taken to secure the functionality.
- ⏱ About 60 minutes
- Counts towards: CompTIA PenTest+ (exam PT0-003) · OffSec Certified Professional (exam OSCP)
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- AI Security Engineer — career path — step 4: Attack AI like a red teamer





