How to exploit a blind SSRF?

[@janekmachnicki2593]

Thanks for another briliant tutorial .Great job

[@intigriti]

👊

[@SrRunsis]

THanks so much for this video Intigriti!!!! You guys are awesomee

[@intigriti]

Our pleasure!

[@mohmino4532]

Awesome as usual ma man 🤩 but why did u put this { foo;} ? and what is his role in this process 🙃

[@intigriti]

Thank you! The "foo" bit isn't needed, shellshock payloads often just use "() {:;}" to declare the bash function.

[@mohmino4532]

@@intigriti i see thanks again ❤

[@lol-hz9mc]

That's an interesting explanation!!! Thanks

[@intigriti]

Glad you liked it!

[@huuloc8719]

Nice.

[@intigriti]

Thanks.

[@alan.m.rebeira]

😍😍😍

[@intigriti]

😘

[@hackersguild8445]

Thanks for sharing. Nice video :)

[@intigriti]

Thank you!

[@tudasuda5501]

Thnx!

[@intigriti]

Welcome!

[@fahadfaisal2383]

This vulnerability is common is websites?

[@intigriti]

SSRFs have become quite common!

[@itsm3dud39]

i used other commands like id, /etc/passwd .. they are not working.why only whoami command working?

[@intigriti]

There could be a number of measures in place preventing you from running other commands.

[@shpockboss3834]

On every target ,do we have to try same IP? or where can we get IP?

[@intigriti]

This is something you'd have to guess. Read up on private IP ranges and then you'll see which to scan!

[@solo_code_rider4660]

Thanks

[@intigriti]

Welcome

[@jacobfurnish7450]

4:14 when you say is any host in the internal network vuln to shellshock, internal network meaning origin server or would you also have to bypass a CDN like CloudFlare or AWS in order to exploit?

[@intigriti]

Once you've found and exploited the SSRF, it's the web server scanning the internal network which is unlikely to be protected.

[@AnthonyMcqueen1987]

This is it time to shut them down. lol JK

[@intigriti]

👀 😋

[@MichaelCooter]

First!

[@intigriti]

🏎