Plant Photographer (TryHackMe)
Plant Photographer is a TryHackMe challenge built around a botanist's personal portfolio website running on Werkzeug/Python. The box covers three main vulnerability classes: SSRF (Server-Side Request
#ssrf
Posts tagged #ssrf
Message to Garcia (TryHackMe)
Introduction In 1899, Elbert Hubbard wrote a short essay that would outlive him by over a century. It told the story of Lt. Andrew Rowan, a soldier given one mission: deliver a message to General Garc
Surfer - SSRF (TryHackMe)
Introduction: Web app with hidden internal pages. The challenge mentions an SSRF vulnerability. Goal: Access restricted admin functionality. What You Did: Login with default creds (admin/admin) Found export2pdf.php endpoint that accepts URLs Explo...
Challenges: MD2PDF (TryHackMe)
TopTierConversions LTD released MD2PDF, a tool designed to convert Markdown documents into PDF quickly and securely—or so they claimed. As part of this challenge, we were tasked with testing the service for weaknesses. At first glance, it seemed simp...
Introduction to Web Hacking: Intro to SSRF (TryHackMe)
This article will cover the Intro to SSRF write-up under the Web Fundamentals on THM. What is an SSRF? What is an SSRF? SSRF stands for Server-Side Request Forgery. It's a vulnerability that allows a malicious user to cause the webserver to make an a...
