Server-Side Request Forgery (SSRF)

Summary

Tricking a server into making unintended requests to internal or external systems on the attacker's behalf — often used to reach internal services not otherwise exposed to the internet.

• 1Learn how SSRF can be used to reach internal cloud metadata endpoints (a common real attack pattern).
• 2Practice identifying an SSRF vulnerability in a legal practice lab.
• 3Understand why validating and restricting outbound requests is the core defense.