⤷ Title: SSRF: The Complete Interview-Ready Breakdown (and Why the Standard Defense Keeps Losing)
════════════════════════
𐀪 Author: Prianshu Bhaskar
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 09:32:10 GMT
════════════════════════
⌗ Tags: #application_security #interview_questions #web_application_security #ssrf #owasp_top_10
════════════════════════
𐀪 Author: Prianshu Bhaskar
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 09:32:10 GMT
════════════════════════
⌗ Tags: #application_security #interview_questions #web_application_security #ssrf #owasp_top_10
Medium
SSRF: The Complete Interview-Ready Breakdown (and Why the Standard Defense Keeps Losing)
Part of my Application Security Fundamentals series.
⤷ Title: SSRF
════════════════════════
𐀪 Author: Sourabh Jala
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #vulnerability #ethical_hacking #ssrf #cybersecurity
════════════════════════
𐀪 Author: Sourabh Jala
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #vulnerability #ethical_hacking #ssrf #cybersecurity
Medium
SSRF
INTERNAL REQUEST PIVOT
⤷ Title: HauntMart Web Challenge (Easy Difficulty)
════════════════════════
𐀪 Author: Joseph "n3m0” KANKO
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:53:13 GMT
════════════════════════
⌗ Tags: #ctf #web_development #ssrf #ctf_writeup #ssrf_walkthrough
════════════════════════
𐀪 Author: Joseph "n3m0” KANKO
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 07:53:13 GMT
════════════════════════
⌗ Tags: #ctf #web_development #ssrf #ctf_writeup #ssrf_walkthrough
Medium
HauntMart Web Challenge (Easy Difficulty)
Hello everyone, and welcome to this write-up for the “HauntMart” web challenge, which is rated as easy.
⤷ Title: Stop Writing Regexes for IP Security: SSRF Protection Is a Network Semantics Problem
════════════════════════
𐀪 Author: Berkan SAL
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 19:47:58 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #ssrf #vulnerability_research #security_research
════════════════════════
𐀪 Author: Berkan SAL
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 19:47:58 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #ssrf #vulnerability_research #security_research
Medium
Stop Writing Regexes for IP Security: SSRF Protection Is a Network Semantics Problem
IP addresses are not strings with dots and colons. Treating them that way is how SSRF defenses develop blind spots.
⤷ Title: Crashing a Webhook Endpoint by Disguising an IP Address — $100 Bounty
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 09:03:27 GMT
════════════════════════
⌗ Tags: #webhooks #bug_boun #ssrf #bugbounty_writeup #cybersecurity
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 09:03:27 GMT
════════════════════════
⌗ Tags: #webhooks #bug_boun #ssrf #bugbounty_writeup #cybersecurity
Medium
Crashing a Webhook Endpoint by Disguising an IP Address — $100 Bounty
What This Bug Is, in Plain Words
⤷ Title: I Asked “What is OAST?” and Fell Down a Rabbit Hole — Here’s What I Learned
════════════════════════
𐀪 Author: Sivanesan M
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 16:23:24 GMT
════════════════════════
⌗ Tags: #oast #ssrf_vulnerability #cyber_security_solutions #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Sivanesan M
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 16:23:24 GMT
════════════════════════
⌗ Tags: #oast #ssrf_vulnerability #cyber_security_solutions #bug_bounty #cybersecurity
Medium
I Asked “What is OAST?” and Fell Down a Rabbit Hole — Here’s What I Learned
A few days ago, I stumbled across a term in a bug bounty write-up: OAST payload. I had no clue what it meant, so I did what anyone would do…
⤷ Title: SSRF & Git ext:: [HTB Editorial Walkthrough]
════════════════════════
𐀪 Author: Pawut Jingjit
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:43:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ctf #hackthebox #ssrf
════════════════════════
𐀪 Author: Pawut Jingjit
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:43:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ctf #hackthebox #ssrf
Medium
SSRF & Git ext:: [HTB Editorial Walkthrough]
Editorial is an easy difficulty Linux machine that features a publishing web application vulnerable to Server-Side Request Forgery (SSRF)…
⤷ Title: Unauthenticated XXE leading to SSRF and internal resource access
════════════════════════
𐀪 Author: Moaaz Afifi
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:59:43 GMT
════════════════════════
⌗ Tags: #xxe_attack #bugbounty_writeup #ssrf #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Moaaz Afifi
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:59:43 GMT
════════════════════════
⌗ Tags: #xxe_attack #bugbounty_writeup #ssrf #penetration_testing #cybersecurity
Medium
Unauthenticated XXE leading to SSRF and internal resource access
During my BBH, i was looking at a subdomain that returned 403 on everything.
⤷ Title: Kiteworks Patches 78 Vulnerabilities, Including Critical Account Takeover Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 02:09:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #CVE_2026_102115 #CVE_2026_102147 #CVE_2026_102149 #Email Protection Gateway #Kiteworks #Kiteworks vulnerabilities #ssrf
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 02:09:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #CVE_2026_102115 #CVE_2026_102147 #CVE_2026_102149 #Email Protection Gateway #Kiteworks #Kiteworks vulnerabilities #ssrf
Daily CyberSecurity
Kiteworks Patches 78 Vulnerabilities, Including Critical Account Takeover Flaw
TL;DR Kiteworks disclosed 78 security flaws across its Core platform, Email Protection Gateway, and forms products. Nine of these Kiteworks vulnerabilities rate Critical, led by a 9.8 password res…
⤷ Title: SonicWall Patches CVSS 10 Pre-Auth SSRF Flaw and Three More Bugs in SMA1000 Appliances
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 17:29:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102255 #CVE_2026_102256 #CVE_2026_102257 #Remote Access #SMA1000 #SonicWall #ssrf
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 17:29:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102255 #CVE_2026_102256 #CVE_2026_102257 #Remote Access #SMA1000 #SonicWall #ssrf
Daily CyberSecurity
SonicWall Patches CVSS 10 Pre-Auth SSRF Flaw and Three More Bugs in SMA1000 Appliances
TL;DR SonicWall has fixed four flaws in its SMA1000 remote access appliances, led by CVE-2026-102255, a SonicWall SMA1000 vulnerability with a perfect CVSS score of 10.0. The pre-authentication SS…