SSRF versus Infrastructure<\/p>\n\n\n\n Below you can see the vulnerability examples<\/p>\n\n\n\n Affected Endpoint:<\/strong><\/p>\n\n\n\n https:\/\/victim.com\/api\/v1\/ui\/getresource?rid=https:\/\/internal.victim.com\/storage\/logo.png<\/p>\n\n\n\n Payloads:<\/strong><\/p>\n\n\n\n ftp:\/\/internal.victim.com<\/p>\n\n\n\n Affected Endpoint (weak host validation):<\/strong><\/p>\n\n\n\n https:\/\/victim.com\/api\/v1\/ui\/getresource?rid=storage\/logo.png<\/p>\n\n\n\n Sample code:<\/strong><\/p>\n\n\n\n String baseUrl = “http:\/\/internal.victim.com”; Authority composition<\/strong><\/p>\n\n\n\n Back in business<\/strong><\/p>\n\n\n\n Affected Endpoint (weak host validation):<\/strong><\/p>\n\n\n\n https:\/\/victim.com\/api\/v1\/ui\/getresource?rid=storage\/logo.png<\/p>\n\n\n\n Payloads:<\/strong><\/p>\n\n\n\n <\/p>\n\n\n\n Source: <\/p>\n\n\n\n Server-Side Request Forgery This attack vector exploits vulnerabilities in server communication by manipulating network connections established by the application server. This manipulation, known as man-in-the-middle (MITM) or session hijacking, allows attackers to: Redirect server requests: Instead of reaching their intended destination, requests get rerouted to malicious actors who can intercept and alter data. Port scan internal servers: By…<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[49],"tags":[50,53,51,52],"_links":{"self":[{"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/posts\/10831"}],"collection":[{"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/comments?post=10831"}],"version-history":[{"count":6,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/posts\/10831\/revisions"}],"predecessor-version":[{"id":10840,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/posts\/10831\/revisions\/10840"}],"wp:attachment":[{"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/media?parent=10831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/categories?post=10831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/temperies.com\/es\/wp-json\/wp\/v2\/tags?post=10831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/temperies.com\/wp-content\/uploads\/2024\/01\/image.png\")
<\/figure>\n\n\n\n
String resource = String.format(“%s\/%s”, baseUrl, rid);
if (resource.startsWith(baseUrl)) {
HttpResponse response = (new HttpClient()).target(resource).get();
return (response.getStatus() == 200)
? response.getStream()
: response.getErrorMessage();
}<\/p>\n\n\n\n![\"\"](\"https:\/\/temperies.com\/wp-content\/uploads\/2024\/01\/image-1.png\")
<\/figure>\n\n\n\n