Server-Side Request Forgery (SSRF) Courses and Certifications

Mastering Server-Side Request Forgery (SSRF) Vulnerabilities

85 ratings at Udemy

How to Find, Exploit and Defend Against SSRF Vulnerabilities. For Ethical Hackers, Developers & Pentesters

• Udemy
• 3 hours 10 minutes
• On-Demand
• Paid Course

Learn to identify and prevent server-side request forgery, a critical web application security risk. Explore its significance in the 2021 OWASP Top 10 and enhance your cybersecurity skills.

• Codecademy
• 1 hour
• On-Demand
• Free Trial Available

Learn to identify, exploit, and protect against Server-Side Request Forgery (SSRF) vulnerabilities. Explore Facebook's SSRF dashboard and practice with Apache Solr in hands-on labs.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

Cyber Mentor

Learn to Hack WebApps - SSRF (Server-Side Request Forgery)

Explore server-side request forgery (SSRF) vulnerabilities in web applications, understanding attack techniques and mitigation strategies for enhanced cybersecurity.

• YouTube
• 2 hours 13 minutes
• On-Demand
• Free Video

NahamSec

Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy

Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.

• YouTube
• 42 minutes
• On-Demand
• Free Video

NahamSec

What is Server-Side Request Forgery - SSRF?

Explore Server-Side Request Forgery (SSRF): its definition, potential impacts, and importance in web security. Learn to identify and mitigate this critical vulnerability.

• YouTube
• 16 minutes
• On-Demand
• Free Video

Bugcrowd

Server Side Request Forgery

Learn to identify, exploit, and mitigate Server-Side Request Forgery vulnerabilities. Covers external and internal SSRF, bypassing blacklists, and includes practical demonstrations and real-world examples.

• YouTube
• 37 minutes
• On-Demand
• Free Video

HackerOne

H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF

Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.

• YouTube
• 30 minutes
• On-Demand
• Free Video

OWASP TOP 10: File upload vulnerabilities ~2023

24 ratings at Udemy

Vulnerabilities in File upload | Learn with Fun way

• Udemy
• 1 hour 49 minutes
• On-Demand
• Paid Course

Hussein Nasser

Popular Web Attacks - XSS, CSRF, SSRF, SQL Injection, MIME Sniffing, Smuggling and More

Comprehensive overview of common web attacks, including XSS, CSRF, SSRF, SQL injection, and more. Practical examples and explanations enhance understanding of web security vulnerabilities.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Free Video

Cooper

Piercing the Veil - Server Side Request Forgery Attacks on Internal Networks

Explore esoteric SSRF entry points, internal service vulnerabilities, and mitigation strategies in ethical hacking and bug bounty programs.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Bugcrowd

Bug Bounty Hunting Methodology - Jason Haddix from Bugcrowd's LevelUp

Comprehensive web hacking methodology covering reconnaissance, scanning, and exploitation techniques for bug bounty hunters and security researchers.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Black Hat

Edge Side Include Injection - Abusing Caching Servers into SSRF and Transparent Session Hijacking

Explore Edge Side Include injection, a web attack vector exploiting caching servers. Learn how this legacy technology can lead to SSRF and session hijacking vulnerabilities in modern web infrastructure.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Black Hat

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a novel SSRF exploit technique targeting URL parsers in popular programming languages. Learn about vulnerabilities in Python, PHP, Java, and more, uncovering inconsistencies between parsing and requesting.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk