Start free

Browse › Advanced Web Application Exploitation

Web 201 - Lab 8: Server Side Request Forgery

Part of Advanced Web Application Exploitation Topic: Web Hacking

Counts towardsCompTIA PenTest+ badgeOffSec OSCP badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this example we will be faced with a web application that will simply open whatever resource you specify, with increasingly strict restrictions.

  • However, in a real application, this issue will likely be a bit harder to find.
  • It might surface in an application that is acting as a proxy for some resource or it might simply be retrieving resources from a private network.
  • In any case, some of the restrictions that we will explore may be natural restrictions based on how the application is implemented, or may be steps taken to secure the functionality.

Roadmaps that use this lab