Collected research

A Glossary of Blind SSRF Chains

assetnote · GitHub

Catalogues ways to turn blind SSRF into observable or higher-impact attack chains against internal services, using canary callbacks, DNS discovery, response side channels, and protocol-specific HTTP or Gopher payloads. It covers numerous server products and paths from internal service access to data exposure, denial of service or remote code execution.

Record

Researcher

assetnote

Published by

GitHub

In the archive

• Collected in the 2021 research round

Related sources

• Payload repository

Tags

• ssrf
• attack-chain
• rce
• side-channel
• dns
• xxe
• deserialization
• dos
• tooling
• owasp-a03-2021
• owasp-a08-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of assetnote, first published at the original source. Preserved copies are kept so the citation survives its host.