Pentesting 101

1) WHAT IS SSRF Server-Side Request Forgery, or SSRF , is a web security vulnerability that occurs when an attacker tricks a server into making unintended requests. Instead of the server only fetching resources it’s supposed to, the attacker manipulates it to send requests to locations of their choice. 1.1 There are generally two ways this flaw shows up: Classic SSRF – The attacker sends a crafted request, and the server’s response is sent back to them. This makes it easy to see the results directly in their browser. Blind SSRF – The request is still triggered on the server, but no response is shown to the attacker. Even without direct feedback, attackers can still exploit this through side effects like logging, error messages, or using out-of-band techniques. 1.2 Why is SSRF Dangerous? An exploited SSRF vulnerability can open serious doors for attackers, including: Gaining access to internal or restricted systems. Extracting sensitive organizational or customer data. ...

Understanding File Inclusion Vulnerabilities File Inclusion is a common web application vulnerability that occurs when an application dynamically loads files based on user input without proper validation. This flaw can lead to Local File Inclusion (LFI), Remote File Inclusion (RFI), and Directory Traversal attacks, allowing attackers to read sensitive files, disclose system information, or even execute malicious code. In this article, we’ll cover: How file inclusion vulnerabilities work Types: LFI, RFI, and Directory Traversal Real-world exploitation examples Risks and impacts Prevention techniques How File Inclusion Works Some web applications allow users to request and display files from the server, such as images, documents, or language templates through the URL parameters. Example URL with a parameter: http://webapp.thm/get.php?file=userCV.pdf Here: file  -> parameter name userCV.pdf  -> file requested If user input is not valid...