Server-Side Request Forgery (SSRF) Explained

[@francoischaer]

hey Ben, we surely already love your content, but, for those like me, who are new to the industry, trying to learn and move forward, we need the technical, very basic content, this will help us understand more in depth how things goes. thank you again for the great content you are delivering, and for the amount of dedication you are putting in

[@alechernandez5506]

When there is an issue or something you understand you should go down the rabbit hole and” master “ it. I’m sure you’re doing well now, this comment was a year ago! But this comment is for people just learning 😁

[@bashiqali2142]

Content + real vulnerability example would be great 🔥

[@baraamansi7637]

OFC it would be truly helpful to see more content like this

[@khalidmeister]

Never thought I could learn SSRF in a more comprehensive way by under 15 minutes! Thanks man!

[@NahamSec]

Thanks! I'm glad it helped!

[@justice8476]

​@NahamSec دمت گرم مهندس، ارادت

[@SanketUppalwar]

More content is needed like this along with real life examples that you experienced during bug bounty or other testing application

[@Free.Education786]

Please, if possible, cover these advanced topics like How to bypass Drupal CMS or other secured CMS? How to bypass HARD WAF protection that stops HTML, SQL, and XSS injection payloads? Payload single-double-triple encoding using Cyber-Chef? How to find the real origin IP of secured websites behind Cloudflare, Akamai, ModSecurity, AWS CDN, etc.,? How to bypass Hard WAF using SQLMAP or Burpsuite? How to find hidden vulnerable parameters and endpoints inside the .js and .jason files? How to find hidden admin pages, cPanel pages, and WHM pages ? Please cover these important topics. Thanks

[@andrewsan2998]

East or West, naham is the best.

[@JPwnage]

Man, keep both coming.!! maybe pick a day to post technical and assign another day for the mentorship aspects or something... Either way ... BOTH ARE EQUALLY IMPORTANT FOR SUCCESS!! ...Also i would love a video on how to transfer from labs /ctf into hacking real world apps. As the fundamentals are the same or close but also very different in alot of ways.

[@supritpandurangi5647]

Waiting for this type of content ; please Continue Ben :)

[@billelghezal7855]

Thank you very much, I hope you'll continue doing these kind of videos 😊

[@yourinatestrn3436]

Yea would love this type of content plz part 2

[@Jarling-so4oi]

Make more technical content

[@GrimComix]

Yes, more content like this please 😁

[@איתיאיתי-צ4ט]

Hi man, I would like to hear you how to do bug bounties exactly and maybe if you can show on live all the necessary steps to do it

[@vaibhavsangwan996]

Hey I absolutely love this, I would love to learn from more technical videos like this.

[@tehlan6340]

You are great bro

[@CYBER_BLUE4]

Part two

[@amoh96]

We really want this explain bugs for beginners and give us some advice about the bug i really wish u make playlist for this !! thank u alot

[@citywitt3202]

As CEO of a startup please keep this stuff coming. It took a lot to convince the dev team that exploits weren’t just down to weak passwords so I arranged an in house demo. Jaws dropped. This stuff builds so much awareness. Thank you!

[@tabysh_s5016]

Ben One Suggestio | Make a precise playlist of OWASP TOP 10 2021 | Like a 10 min video / on each critical vulnerability

[@augustvansickle1]

Would love to see more technical content! TIA

[@andrewlentz1205]

I think you should pivot to doing Unboxing Videos. If that's not in the cards then please keep the technical videos coming!

[@sveneFX]

Fully in with technical vids, especially when you chain these with Real life vulns you have found 👌

[@AnonymousWolf-r6d]

more vcontent like this cover all top 10 owasp vulnerability please...

[@AdarshThakur-Official]

Please create similar content to this and please add Hindi subtitles for a better understanding

[@djrozh5438]

Creat a playlist content like the types of vulnerabilities and bugs that are common or rate easy to hard like xss or account takover

[@imosolar]

More real bugbouty tech work

[@raghvendrachouhan3433]

theory is all good but when it comes to practical i'm hopeless.

[@tchalla109]

Drop video with all of the topic you mentioned in the video.

[@Tergaurav]

Vulnerability content or owasp top 10 pls

[@BulbulBigbossbd]

Hi NahamSec, I'm a regular viewer of your content.can you make video on business logic in dept!! waiting for it

[@gokul5582]

What to do if we don't have burp collaboraor ?

[@Aashishsec]

more content on web attacks

[@Asadneon]

web hacking content more please

[@suryaroja03]

please post content like this...thank you

[@tehlan6340]

I make hacking videos

[@ogbooker4538]

both content is fine and some free tutorials

[@SecurityVaultYt]

Epic, Part 2 please.

[@rafekhen4263]

more content like this please

[@mahdihasan42]

we need location traking tutorial

[@RnVjayBZb3V0dWJl]

Haya! I have quite a lot of experience in pentesting webapps, but i do not have any experience in hosting an instance of a webserver, securing it or being able to load an insecure server, but in a secure way cause we don't want a creepy scanner rooting it and being malicious when i want to test it :P So my question, could you make a lill tutorial in how to, for example, use a docker or maybe host a site in different means through a Digital Ocean instance? :P Would be fun to learn a little bit about it and then being able to pentest towards it. By learning this, one can use your knowledge to host a file hosting instance to make an RFI etc, which is a bit difficult without an outwards facing host ^^ Stay safe and happy late Easter!

[@onsiyammalembe1546]

I love this content make more please

[@jeremyg737]

part 2? more content like this!

[@fadelafanmahendra653]

more content like THIS!

[@MUHAMMADHASNAATARSHAD]

Part 2 ,,4,5,6,7,8,9,-----,99999

[@bugs-lk3jf]

Great Content; More Please 🤑

[@Boondog-hv4wy]

You have helped me a lot as I am stepping into Bug Bounties. I have loved connecting with the people in your discord and have learned so much! I am 1 semester away from getting my bachelor's in computer science and your content as well as the people I found through your community have been invaluable to my success. Thank you so much!

[@SunilTiwari-ez9lj]

More parts on this topic ..

[@taqiuddinismail9542]

more content like thiss

[@CookingCooking77]

MORE CONTENT !!!

[@braaemad2745]

more and more plz

[@dtchallohfranc3360]

Part 2 please 😍

[@Drakan1990]

More please!

[@weniweedeewiki.6237]

PART 2 BRO DEFO

[@srcybersec1736]

Want more vdo

[@mahdihasan42]

location hack

[@entertainment_in_blood]

PART-2

[@BlancoBox]

While I may not have commented before, I've been an avid admirer of your work. As an aspiring pentester, I find your technical content to be precisely what I seek. While your other content is commendable, it's ultimately the expertise you bring that I look up to for learning. Your contributions are truly appreciated.

[@aavezsheikh5781]

More content

[@samadafridi1059]

part 2 or complete playlist on the web Vuln

[@navidof5]

part 2

[@handle_my_handle]

Part 2

[@irvingirving6275]

Preach!

[@yourmove9993]

part 2

[@SalimShaikh-ip7gi]

Part2

[@firosiam7786]

Is Bola and idor the same type of vulnerability with different names

[@stevejones371]

More, more more real world how to once we have done recon. We need to know the steps on how to find bugs.

[@long2330]

Thanks for helpful content! It would be great if u could do more specific showcases about blind SSRF. For example there is a case that I only receive the DNS queries back to the collab. I guess because of outbound restriction but it seems like the server was trying to reach to that domain. Any way in this case that you can prove the ssrf is there with just DNS? Or do you have any suggestion on setting up things in internal network to prove the vulnerability is there? Was a long comment but hope u could imagine the case 😂 thanks

[@noureldinehab2686]

💙

[@shiewhun1772]

Yes, this is great. From a web developer perspective. I'm trying to under how my server side applications could be hacked and this is great content. Please, continue.

[@rllan006]

100% both. I like the nuance you teach here. For example login page and SSRF. This is fantastic content.

[@ss-rc1gy]

fantastic :o , i would like to see a full and advanced recon video from you :)

[@ethyhack]

yes please, give us more content of this kind.

[@volatileobj3cts]

Super down with more technical content!

[@janekmachnicki2593]

Content + real+technical aspect of pen testing and bug hunting .Thanks

[@Arian-e7t]

I would like to see basic contents like this.

[@heli_9]

I’d love more technical videos

[@akeelw084]

part 7 we want

[@ZarakKhanNiazi]

I love you naham

[@NahamSec]

[@TrecXsec]

More part 2. Need more technical vids

[@zak6820]

Yes more content like this pls

[@NathanielMitchellnm]

Part 2!

[@soulvideos7834]

More content like this 🙂🙏❤️🔥

[@ogbooker4538]

stay consistent big bro

[@The_capitol]

I would like to see one of the vulnerabilities you have found and walk through the info gathering stage all the way to the post exploit while explaining the mindset/methodology

[@NahamSec]

Soon :)

[@alihussainzada3392]

It was awesome Next xxe plz

[@lovedaysmart9183]

Just what we need Ben 😊 thank you 👏🏻

[@devanshuthanvi731]

Perfect type of content 😃👍

[@loneliestwolf4228]

Part 2 please....

[@LulzWalker]

Love this!

[@NexInfernis]

we need more part of this

[@mindf4rt]

More pls =)

[@0xbeven462]

I reported my browser 😂

[@husamgameel1489]

yup yup more tutorials for hacking and IT stuff how to do ore bypass

[@bashiqali2142]

😊

[@JD-wj1bf]

Part 2

[@Haxr-dq6wt]

Bad explanation with a lot or wrong info