Skip to the chapter
←Web SecurityGGroundwork🔒Web Security
Web Security/Advanced/A3
19 / 24 written chapters
The cover
  1. B1The security mindset
  2. B2Injection attacks
  3. B3XSS
  4. B4Auth basics
  5. B5Transport security
  6. B6Sensitive data exposure
  7. B7Security headers
  1. I1CSRF
  2. I2Access control
  3. I3Session management
  4. I4OAuth & OIDC
  5. I5API security
  6. I6Supply-chain security
  7. I7CORS in depth
  8. I8Misconfiguration
  9. I9Secrets management
  1. A1OWASP Top 10
  2. A2Prototype pollution
  3. A3SSRF
  4. A4Security testing tools
  5. A5Cryptography
  6. A6Zero trust
  7. A7Incident response
  8. A8Compliance basics

🔒A3 · Part 3 · Advanced

Server-Side Request Forgery (SSRF)

Not written yet.
19 of 24

Sketch only

01This chapter will cover

Server-Side Request Forgery (SSRF)

  • Tricking a server into requesting what it shouldn't

→Next stop

  1. A2Previous · A2Prototype pollution & deserialization attacks
  3. A3you are here
  5. Next · A4Security testingNext chapter

01Meanwhile

  • JavaScript is written, start there
  • R3 · JavaScript & TS covers this in the interview book