Server-side request forgery
In computer security, server-side request forgery (SSRF) is a type of exploit where an attacker abuses the functionality of a server causing it to access or manipulate information in the realm of that server that would otherwise not be directly accessible to the attacker.[1]
Similar to cross-site request forgery which utilises a web client, for example, a web browser, within the domain as a proxy for attacks; an SSRF attack utilizes an insecure server within the domain as a proxy.
Types of SSRF -
i. Basic SSRF: Here the response is displayed to the attacker.
ii. Blind SSRF: Here the response is not displayed to the attacker. (Difficult to detect at first sight)
References
- ^ "The Open Web Application Security Project". OWASP.org. Retrieved 23 July 2018.
 | This computer security article is a stub. You can help Wikipedia by expanding it. |