Server-Side Request Forgery (SSRF) Explained And Demonstrated

// Membership //
Want to learn all about cyber-security and become an ethical hacker? Join this channel now to gain access into exclusive ethical hacking videos by clicking this link: / @loiliangyang
// Courses //
Full Ethical Hacking Course: www.udemy.com/...
Full Web Ethical Hacking Course: www.udemy.com/...
Full Mobile Hacking Course: www.udemy.com/...
// Books //
Kali Linux Hacking: amzn.to/3IUXaJv
Linux Basics for Hackers: amzn.to/3EzRPV6
The Ultimate Kali Linux Book: amzn.to/3m7cutD
// Social Links //
Website: www.loiliangya...
Facebook: / loiliangyang
Instagram: / loiliangyang
LinkedIn: / loiliangyang
// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers.

[@koushikchatterjee6933]

You rocked the SSRF

[@anomalydheryn9360]

YOUR LESSON ROCKS!!! shout out from Indonesia 🙏🏼

[@bigdatax6512]

minta no WA lu dunk bro...biar bisa sharing

[@anomalydheryn9360]

@@bigdatax6512 sorry baru balas bro, baru read lg gue

[@nolongeravailable111]

I created notes of this video and it fits exactly on 1 A4 piece of paper and clear thanks for the explanation Yang

[@sudosuraj]

The first words you spoke was for CSRF not for SSRF

[@oentrepreneur]

But he literally said it's for csrf. So what are you yapping on about bro

[@bravo-6900]

Till now I thought this can be done only in terminal & burpsuite. learned something new thx

[@sayahjoo2578]

Great info as usual, thank you from 🇩🇿

[@SuperHero-mh8lo]

Wtsab bro

[@ohxrn2029]

This man is seriously the goat

[@macbook6507]

Thanks Teacher Loi liang for the great tutorial🍷

[@prof.angelinagokhale6004]

Thank you Loi Liang Yang for this wonderful tutorial!

[@oo7posam581]

Sir you are really a Pro Hacker...
Pls also teach
Rce, LFI, Blind Sql and Xss also Admin based Vulnerabilities!

[@0SPwn]

I've taught some on these especially XSS as that's where my specialities are.

[@oo7posam581]

@@0SPwn good videos i will. Definitely check them in Morning
Now its 2am Good Night

[@oo7posam581]

@@0SPwn Also pls upload RCE if you know it would help a lot

[@0SPwn]

@@oo7posam581 RCE occurs in many ways from file uploads, CSV Injection, vulnerable services that are vulnerable to RCE found previously, via insecure Web sockets in rare cases.

[@oo7posam581]

@@0SPwn I know theoretically.. Deserialization, File Upload

[@b391i]

All respect for you 🙏

[@spsumon1298]

All respect for you

[@s.aravindh6227]

Nice video bro 👍👍

[@user-px9oh1uc9l]

Good video, but its a vulnerable web and easy to exploit. show it on a real world website, which have the high security.

[@shashivardhan6541]

ThankYou Sir.

[@jessrecvargas1334]

Where did you get the web goat for testing that. Shout out me I'm from Philippines

[@stevenli5310]

Spotted Orange Tsai!

[@iamkoushik21]

change you camera angel sir

[@anushraman7262]

Sir can you say what we can do for this PAHD attack, kindly please help us Sir.

[@oentrepreneur]

Sir,what tool did you use?

[@scorpionm7568]

you are the best thanks.

[@phuchoayoutube1712]

great you are the best

[@user-yf5ly8zk5z]

Thank you keep going

[@whoami6271]

Greetz from indonesia sir
.
xrelax Security team

[@streamingbroadcastwithsonal]

Sir, is "CSRF" and "SSRF" are the same thing?

[@strongman7940]

i know there is no 100% security but what i can do for maximum web protection (i still use php and mysql in my website)

[@Saw-o3h]

it workes like API isnt it?
so I meant we would induce the application to fetch watever we want by chsnging the parameter that relevent to fetching info from server.
is that right?

[@tina1600]

What is the tool that he used again?

[@ajazahmed4682]

thanks for sharing

[@kabandajamir9844]

So nice

[@adriang8420]

Yo bro is there any way you can help me I was hacked and who ever hacked me rooted my device I have never connected my phone to a computer how is that possible oh another thing one time I looked up my ip and I was redirected to centOS website

[@akinwalefemi8728]

You too much bro. 👍😎

[@GAMER-nt8qo]

nice

[@cosmicjoker3687]

people should be ashamed for not subscribing

[@unbelievableeditz1mviews154]

1st

[@dhameliyaarpit8665]

Cool

[@mustang1902]

some of them work on google and fb

[@yuto-_6353]

You play minecraft 😳?

[@nickmalone3143]

My head hurts

[@ROTEANDO9999]

TRANSLATE SPANISH BRO PLEASE ? :(

[@marcoadani4555]

💪🔥💪

[@pankajmatho4791]

first

[@heeraheera5157]

Wich method of User crackers passworld

[@adriang8420]

Bro I would pay you if you helped me figure out who is fucking with my phone excuse my language..

[@cvspvr]

you sound like the fried rice guy

[@liveeventcreators4222]

Webgoat is a website is that ur own?

[@fancywaifu9821]

No, you download and run it on a different Ip or computer

[@cheraousalwa160]

Sz

[@qr1n175]

666

[@couragethecomputernerd]

999

[@rafsanzami7792]

I am putting "file:///etc/passwd" in a parameter value & I am getting 405 Method Not Allowed response from an NGINX server. Does it mean, it's vulnerable?

[@abczwq8364]

webgoat????

[@KokoKoko-gu2jx]

Can you help me when merging the payload with any application and when compiling them it appears error: no such file or directory @ rb_sysopen - /tmp/d20210608-3154-19n4sci/aligned.apk Give me a solution please

[@Paltak327]

Dear friend, put this kind of hack right on it through Metasplite video
use auxiliary/gather/android_htmlfileprovider
2- set LHOST
3- set LPORT
ifconfig

[@user-yf5ly8zk5z]

Thank you keep going

[@user-yf5ly8zk5z]

Thank you keep going