Intermediate
Cybersecurity & Cryptography
Q60 / 100
What is SSRF (Server-Side Request Forgery)?
Correct! Well done.
Incorrect.
The correct answer is B) An attack making the server issue requests to internal resources the attacker cannot access directly, often exposing cloud metadata or internal services
B
Correct Answer
An attack making the server issue requests to internal resources the attacker cannot access directly, often exposing cloud metadata or internal services
Explanation
SSRF: attacker controls a URL the server fetches (e.g., image URL). They set URL to http://169.254.169.254/metadata (AWS IMDSv1) to steal cloud credentials. Defense: validate URLs, block internal IP ranges, use IMDSv2.
Progress
60/100