Server-Side Request Forgery (SSRF) Courses and Certifications

Learn to identify and prevent server-side request forgery, a critical web application security risk. Explore its significance in the 2021 OWASP Top 10 and enhance your cybersecurity skills.

• Codecademy
• 1 hour
• On-Demand
• Free Trial Available

Learn to identify, exploit, and protect against Server-Side Request Forgery (SSRF) vulnerabilities. Explore Facebook's SSRF dashboard and practice with Apache Solr in hands-on labs.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

NahamSec

Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy

Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.

• YouTube
• 42 minutes
• On-Demand
• Free Video

NahamSec

What is Server-Side Request Forgery - SSRF?

Explore Server-Side Request Forgery (SSRF): its definition, potential impacts, and importance in web security. Learn to identify and mitigate this critical vulnerability.

• YouTube
• 16 minutes
• On-Demand
• Free Video

HackerOne

H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF

Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Cyber Mentor

Learn to Hack WebApps - SSRF (Server-Side Request Forgery)

Explore server-side request forgery (SSRF) vulnerabilities in web applications, understanding attack techniques and mitigation strategies for enhanced cybersecurity.

• YouTube
• 2 hours 13 minutes
• On-Demand
• Free Video

Bugcrowd

Server Side Request Forgery

Learn to identify, exploit, and mitigate Server-Side Request Forgery vulnerabilities. Covers external and internal SSRF, bypassing blacklists, and includes practical demonstrations and real-world examples.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Hussein Nasser

Popular Web Attacks - XSS, CSRF, SSRF, SQL Injection, MIME Sniffing, Smuggling and More

Comprehensive overview of common web attacks, including XSS, CSRF, SSRF, SQL injection, and more. Practical examples and explanations enhance understanding of web security vulnerabilities.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Free Video

Black Hat

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a new SSRF exploit technique targeting URL parsers in popular programming languages. Learn about protocol smuggling, fuzzing tools, and discover vulnerabilities in widely-used libraries.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web

Explore API security vulnerabilities, focusing on Apple Pay's impact, with live demos and actionable strategies for improving defensive programming practices.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a novel SSRF exploit technique targeting URL parsers in popular programming languages. Learn about vulnerabilities in Python, PHP, Java, and more, uncovering inconsistencies between parsing and requesting.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

Edge Side Include Injection - Abusing Caching Servers into SSRF and Transparent Session Hijacking

Explore Edge Side Include injection, a web attack vector exploiting caching servers. Learn how this legacy technology can lead to SSRF and session hijacking vulnerabilities in modern web infrastructure.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Bugcrowd

Bug Bounty Hunting Methodology - Jason Haddix from Bugcrowd's LevelUp

Comprehensive web hacking methodology covering reconnaissance, scanning, and exploitation techniques for bug bounty hunters and security researchers.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Black Hat

Viral Video - Exploiting SSRF in Video Converters

Exploiting SSRF vulnerabilities in video converters using HLS playlists, potentially leading to critical security breaches in cloud-based services. Includes demonstration of attacks on major platforms.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk