SSRF - Lab #1 Basic SSRF against the local server | Short Version

In this video, we cover Lab #1 in the SSRF module of the Web Security Academy. This application's stock check feature is vulnerable to SSRF. To solve the lab, we change the stock check URL to access the admin interface at localhost/admin and delete the user carlos.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: bit.ly/30LWAtE
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Long Video: • SSRF - Lab #1 Basic SS...
Python script: github.com/rkh...
Notes.txt document: github.com/rkh...
Web Security Academy Exercise Link: portswigger.ne...
Rana's Twitter account: / rana__khalil

[@RanaKhalil101]

Don't want to wait for the weekly release schedule to gain access to all the videos and want to be added to a discord server where you can ask questions? Make sure to sign up to my course: bit.ly/30LWAtE ✨✨

[@RafaelZampiva]

you are one of the best teachers on the subject. your display is very good and clear.

[@bohidorshon]

Rana Khalil you're the best instructor

[@youssefblt9839]

what i like abt ur vids is the reason explaination why thanks alot as always

[@VeVe_AR_Guy]

Thanks and quick to the point

[@richschober2]

@Rana Khalil I would like to first start off by saying I truly enjoy watching your videos! Does your full class cover all labs in portswigger? From what I can see it only covers two sections? I appreciate the other gentleman for creating videos but he doesn’t explain each subject with as much detail as you have demonstrated.

[@RanaKhalil101]

Hi there! Thank you for your feedback on the videos! The course currently covers 3 topics: SQL Injection, SSRF & CSRF. As I record more videos they will be made available through the course first and then through KZbin on a weekly schedule. If you click on the downward button under the Course Curriculum section, you'll see the rest of the videos that are covered in the course :)

[@richschober2]

I will sign up now! 😄

[@handsomemehdi3445]

Thank u for this great video! But I got stuck in a problem from 4:45 . When I clicked on render button, it raises an error of 'embedded browser initialization failed'. I searched for a solution, but nothing found yet... :(

[@joseantoniocervantes9576]

the queen. Thanks

[@东倪]

Is penetration testing easy to find a job abroad? Is the salary high? I am in China, the job opportunities are not very good

[@ysef1102]

can you tech us pls how to use foxyproxy with burp - or how to use burp browser without proxy

[@purvashgangolli5968]

when i intrupt using burp i will not get IP address ,instead i am getting domain name....? what may be the problem?

[@hellishhell6574]

Please tell me: How did she change StockIP? at 2:57. I can’t understand

[@oanphanlam408]

CTRL+SHIFT+U

[@dshofner]

Thank you.

[@yassinom2466]

thanks Rana

[@easydosh73]

Please upload the XXE to youtube too :3 Haha

[@aliel-shennawy3670]

Thanks, may allah please you.

[@isaiahjohnson7707]

wow you sound really good can we maybe get together

[@syuugakuryokoupc3287]

おｋ

[@brunosm0]

thank you