SSRF: 호스트 이름 제한 우회하기

카테고리

Empty

Summary

이 글에서는 SSRF(서버 측 요청 위조) 공격을 다루고 있으며, 호스트 이름 제한을 우회하는 방법에 대해 설명합니다. 특히, 퍼징 기법을 사용하여 이러한 제한을 효과적으로 우회할 수 있는 방법을 제시합니다. 이 기법은 보안 취약점을 탐지하고, 시스템의 방어력을 평가하는 데 유용합니다.

•

Link - https://blog.deesee.xyz/fuzzing/security/2021/02/26/ssrf-bypassing-hostname-restrictions-fuzzing.html

SSRF: Bypassing hostname restrictions with fuzzing

When the same data is parsed twice by different parsers, some interesting security bugs can be introduced. In this post I will show how I used fuzzing to find a parser diffential issue in Kibana’s alerting and actions feature and how I leveraged radamsa to fuzz NodeJS’ URL parsers.

blog.deesee.xyz

Content

SSRF: Bypassing hostname restrictions with fuzzing - https://blog.deesee.xyz/fuzzing/security/2021/02/26/ssrf-bypassing-hostname-restrictions-fuzzing.html

SSRF: Bypassing hostname restrictions with fuzzing

When the same data is parsed twice by different parsers, some interesting security bugs can be introduced. In this post I will show how I used fuzzing to find a parser diffential issue in Kibana’s alerting and actions feature and how I leveraged radamsa to fuzz NodeJS’ URL parsers.

blog.deesee.xyz

Made with Slashpage