Academy
Practitioner track

Server-Side Request Forgery

Make the server fetch for you: internal services, metadata, and egress control.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How SSRF worksYour URL, the server's network position. That asymmetry is the bug.
  2. 02Lab: the helpful fetcherAn image proxy fetches any URL. Tour the inside of its network.
  3. 03SSRF quizThree questions on position, metadata, and egress.