Its not ssrf bro... Its just an intraction with external services.. You need to scan internal things like.. Xspa.. Or internal files.. Or something...👋
So I'm kind of new to SSRF. Basically, you made the file upload to your server from imgur. So what exactly is the impact here? how would a real attacker do something bad with this?
I've found a similar vuln in another website. I understand that this proves an SSRF, but shouldn't we try and add some impact? Sure it's making a request to your server, but what can you do afterwards to harm the website?
Its not ssrf bro... Its just an intraction with external services.. You need to scan internal things like.. Xspa.. Or internal files.. Or something...👋
Exactly .
Right
So I'm kind of new to SSRF. Basically, you made the file upload to your server from imgur. So what exactly is the impact here? how would a real attacker do something bad with this?
dos,port scan
I've found a similar vuln in another website. I understand that this proves an SSRF, but shouldn't we try and add some impact?
Sure it's making a request to your server, but what can you do afterwards to harm the website?
this video only detect the blind ssrf this leads to another steps to verify like port scan etc
Lol. It's not a fucking bug. It's working as expected.
If you get response from server , it's doesn't Means SSRF. You need to get internal service.
Support lodicakes!
Awesome, keep up the good work!
what is the name of your video recording tool ???
bandicam
Paps saan ka naghahanap ng mga ganito? Paturo naman gusto ko rin magreseach.
Can u share how to exploit this bug?
Please provide us some good resources where we can learn blind ssrf
Portswigger academy
your burp shows as professional but there are no scanner and spider?????????
its crack bro
@@phhitachi how you get a crack.? Tell me pwease
@@兽Arufisu on youtube its a lot of video in youtube
where can i contact u bro
may email :ph.hitachi@gmail.com
@@phhitachi sent you an email just now. please check your email. thanks for your fast respond anyway my buddy.
ssrf to rce bro
Bounty?
as always its a duplicate
@@phhitachi what do you mean ?
@@dkkdkdkddkdkdk5810 no rewards, as someone also did it before
Aka didnt fixed
Do you have any bounty?
duplicaite bro