├── .github └── workflows │ └── codeql-analysis.yml ├── AppSecEU15-Server_side_browsing_considered_harmful.pdf ├── README.md ├── SECURITY.md ├── cloud-metadata.txt ├── commonly-open-ports.txt ├── custom-200 └── index.php ├── custom-201 └── index.php ├── custom-30x └── index.php ├── dns.py ├── ffmpeg ├── file_reading_server.py ├── gen_avi.py └── http_q.avi ├── htaccess ├── csv-with-body-md │ └── .htaccess ├── csv-with-body │ └── .htaccess ├── csv-without-body-md │ └── .htaccess ├── csv-without-body │ └── .htaccess ├── img-with-body-md │ └── .htaccess ├── img-with-body │ └── .htaccess ├── img-without-body-md │ └── .htaccess ├── img-without-body │ └── .htaccess ├── json-with-body-md │ └── .htaccess ├── json-with-body │ └── .htaccess ├── json-without-body-md │ └── .htaccess ├── json-without-body │ └── .htaccess ├── pdf-with-body-md │ └── .htaccess ├── pdf-with-body │ └── .htaccess ├── pdf-without-body-md │ └── .htaccess ├── pdf-without-body │ └── .htaccess ├── xml-with-body-md │ └── .htaccess ├── xml-with-body │ └── .htaccess ├── xml-without-body-md │ └── .htaccess └── xml-without-body │ └── .htaccess ├── iframe └── index.php ├── ip.py ├── ssrf2smtp └── index.php ├── svg ├── example1.svg ├── example2.svg ├── example3.svg ├── example4.svg ├── example5.svg ├── example6.svg ├── example7.svg ├── example8.svg └── example9.svg └── us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf /.github/workflows/codeql-analysis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/.github/workflows/codeql-analysis.yml -------------------------------------------------------------------------------- /AppSecEU15-Server_side_browsing_considered_harmful.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/AppSecEU15-Server_side_browsing_considered_harmful.pdf -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/README.md -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/SECURITY.md -------------------------------------------------------------------------------- /cloud-metadata.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/cloud-metadata.txt -------------------------------------------------------------------------------- /commonly-open-ports.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/commonly-open-ports.txt -------------------------------------------------------------------------------- /custom-200/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/custom-200/index.php -------------------------------------------------------------------------------- /custom-201/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/custom-201/index.php -------------------------------------------------------------------------------- /custom-30x/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/custom-30x/index.php -------------------------------------------------------------------------------- /dns.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/dns.py -------------------------------------------------------------------------------- /ffmpeg/file_reading_server.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/ffmpeg/file_reading_server.py -------------------------------------------------------------------------------- /ffmpeg/gen_avi.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/ffmpeg/gen_avi.py -------------------------------------------------------------------------------- /ffmpeg/http_q.avi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/ffmpeg/http_q.avi -------------------------------------------------------------------------------- /htaccess/csv-with-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/csv-with-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/csv-with-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/csv-with-body/.htaccess -------------------------------------------------------------------------------- /htaccess/csv-without-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/csv-without-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/csv-without-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/csv-without-body/.htaccess -------------------------------------------------------------------------------- /htaccess/img-with-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/img-with-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/img-with-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/img-with-body/.htaccess -------------------------------------------------------------------------------- /htaccess/img-without-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/img-without-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/img-without-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/img-without-body/.htaccess -------------------------------------------------------------------------------- /htaccess/json-with-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/json-with-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/json-with-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/json-with-body/.htaccess -------------------------------------------------------------------------------- /htaccess/json-without-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/json-without-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/json-without-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/json-without-body/.htaccess -------------------------------------------------------------------------------- /htaccess/pdf-with-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/pdf-with-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/pdf-with-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/pdf-with-body/.htaccess -------------------------------------------------------------------------------- /htaccess/pdf-without-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/pdf-without-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/pdf-without-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/pdf-without-body/.htaccess -------------------------------------------------------------------------------- /htaccess/xml-with-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/xml-with-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/xml-with-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/xml-with-body/.htaccess -------------------------------------------------------------------------------- /htaccess/xml-without-body-md/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/xml-without-body-md/.htaccess -------------------------------------------------------------------------------- /htaccess/xml-without-body/.htaccess: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/htaccess/xml-without-body/.htaccess -------------------------------------------------------------------------------- /iframe/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/iframe/index.php -------------------------------------------------------------------------------- /ip.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/ip.py -------------------------------------------------------------------------------- /ssrf2smtp/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/ssrf2smtp/index.php -------------------------------------------------------------------------------- /svg/example1.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example1.svg -------------------------------------------------------------------------------- /svg/example2.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example2.svg -------------------------------------------------------------------------------- /svg/example3.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example3.svg -------------------------------------------------------------------------------- /svg/example4.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example4.svg -------------------------------------------------------------------------------- /svg/example5.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example5.svg -------------------------------------------------------------------------------- /svg/example6.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example6.svg -------------------------------------------------------------------------------- /svg/example7.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example7.svg -------------------------------------------------------------------------------- /svg/example8.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example8.svg -------------------------------------------------------------------------------- /svg/example9.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/svg/example9.svg -------------------------------------------------------------------------------- /us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cujanovic/SSRF-Testing/HEAD/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf --------------------------------------------------------------------------------