Server-Side Request Forgery (SSRF) Courses and Certifications

Learn to identify and prevent server-side request forgery, a critical web application security risk. Explore its significance in the 2021 OWASP Top 10 and enhance your cybersecurity skills.

• Codecademy
• 1 hour
• On-Demand
• Free Trial Available

Learn to identify, exploit, and protect against Server-Side Request Forgery (SSRF) vulnerabilities. Explore Facebook's SSRF dashboard and practice with Apache Solr in hands-on labs.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

Bugcrowd

Server Side Request Forgery

Learn to identify, exploit, and mitigate Server-Side Request Forgery vulnerabilities. Covers external and internal SSRF, bypassing blacklists, and includes practical demonstrations and real-world examples.

• YouTube
• 37 minutes
• On-Demand
• Free Video

NahamSec

Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy

Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.

• YouTube
• 42 minutes
• On-Demand
• Free Video

NahamSec

What is Server-Side Request Forgery - SSRF?

Explore Server-Side Request Forgery (SSRF): its definition, potential impacts, and importance in web security. Learn to identify and mitigate this critical vulnerability.

• YouTube
• 16 minutes
• On-Demand
• Free Video

HackerOne

H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF

Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Cyber Mentor

Learn to Hack WebApps - SSRF (Server-Side Request Forgery)

Explore server-side request forgery (SSRF) vulnerabilities in web applications, understanding attack techniques and mitigation strategies for enhanced cybersecurity.

• YouTube
• 2 hours 13 minutes
• On-Demand
• Free Video

Hussein Nasser

Popular Web Attacks - XSS, CSRF, SSRF, SQL Injection, MIME Sniffing, Smuggling and More

Comprehensive overview of common web attacks, including XSS, CSRF, SSRF, SQL injection, and more. Practical examples and explanations enhance understanding of web security vulnerabilities.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Free Video

Cooper

Piercing the Veil - Server Side Request Forgery Attacks on Internal Networks

Explore esoteric SSRF entry points, internal service vulnerabilities, and mitigation strategies in ethical hacking and bug bounty programs.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

SSRF PWNs - New Techniques and Stories

Découvrez de nouvelles techniques d'attaques SSRF, leurs impacts sur la sécurité des applications web et des exemples concrets d'exploitation, présentés par deux experts en sécurité informatique.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a new SSRF exploit technique targeting URL parsers in popular programming languages. Learn about protocol smuggling, fuzzing tools, and discover vulnerabilities in widely-used libraries.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web

Explore API security vulnerabilities, focusing on Apple Pay's impact, with live demos and actionable strategies for improving defensive programming practices.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

When TLS Hacks You

Explore how TLS features can be exploited for attacks, focusing on Server-Side Request Forgery. Learn about a novel, cross-platform method to leverage TLS for targeting internal services.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

The Road Towards 365 Bugs in Microsoft Office 365

Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Owning the Cloud Through SSRF

Explore cloud security vulnerabilities through SSRF attacks, focusing on metadata exploitation, CVE examples, and advanced techniques like DNS rebinding for comprehensive cloud protection.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk