Writeup: SSRF with filter bypass via open redirection vulnerability

Aleyna Doğan
7 March 2024
Portswigger Lab

We can perform SSRF attack with parameters vulnerable to open redirection.

Our path redirecting request is “GET /product/nextProduct?currentProductId=4&path=”. We edit this request according to our payload and send it with the stockApi used in the check stock process.

More Lab

Aleyna Doğan

I'm Aleyna Doğan, a Senior Cyber Threat Intelligence Analyst specializing in cyber threat intelligence, OSINT investigations, and digital risk monitoring. This blog is where I share hands-on cybersecurity content, including TryHackMe writeups, PortSwigger labs, and practical learning resources.

Articles: 150