Later archive addition
Switcheroo: Windows SSDP Blind SSRF
Switcheroo shows how a LAN attacker can answer Windows SSDP discovery, then use an HTTP 301 redirect to make the target issue a blind GET to an arbitrary host, including localhost. The write-up demonstrates the blind SSRF primitive on several Windows versions and discusses its use against local REST APIs.
Record
- Researcher
- initstring
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of initstring, first published at the original source. Preserved copies are kept so the citation survives its host.