5. XXE & SSRF (Server-Side)

5. XXE & SSRF (Server-Side): SSRF is like tricking a server castle guard robot into walking into the castle's internal vaults (like localhost:8080/admin) to fetch secret document

SSRF is like tricking a server castle guard robot into walking into the castle's internal vaults (like localhost:8080/admin) to fetch secret documents, because the robot blindly trusts request paths.

2 Analogies: Server-Side Request Forgery

The Tricked Guard (SSRF)

The XML Entity Bookmarker (XXE)

2 Reasonings: Why It Is Dangerous

Implicit Trust in localhost

Default XML Entity Resolving

2 LEGO Analogies: Guarding Castle Walls

Vulnerability Simulation

Which vulnerability allows an attacker to scan internal network devices by utilizing the target server as a proxy?

Cross-Site Scripting (XSS)

Server-Side Request Forgery (SSRF)

Broken Authentication

SSRF (Server-Side Request Forgery) tricks the server into issuing HTTP requests to its own internal devices and assets.