Collected research

Finding SSRFs in Azure DevOps

Torjus Bryne Retterstøl and @Torjus Bryne Retterstøl · Binary Security AS · 17 January 2025

Maps several Azure DevOps server-side URL-fetching features and shows how weak validation can be turned into SSRF against internal services. The research develops practical bypasses and demonstrates impact across hosted build and integration workflows.

Record

Researcher

Torjus Bryne Retterstøl and @Torjus Bryne Retterstøl

Published by

Binary Security AS

Date

17 January 2025

In the archive

• Collected in the 2025 research round

Tags

• ssrf
• azure
• url-parsing
• cloud
• case-study
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Torjus Bryne Retterstøl and @Torjus Bryne Retterstøl, first published at the original source. Preserved copies are kept so the citation survives its host.