Return to site

What Is Server Side Request Forgery In Ethical Hacking?

Ethical Hacking Course in Delhi

If you are thinking what does SSRF mean? Well it’s an attack which comes unknowingly, and most of you got confused, when you don’t understand what is the actual cause of Service Side Request Forgery (SSRF) means and works of it. I am writing this blog to make clear some basics to you by providing differentiates through these examples. If you want to understand this, and want to learn Ethical Hacking, then you should take classes from the best ethical hacking institute in Delhi.

How does the SSRF Attack Scenario look like?

Service Side Request Forgery is a technical attack as I already told you. It exploits vulnerable web applications by sending a maliciously crafted request to your computer that is why software companies designed IDS or IPS, firewall, it protects your computer system from these malicious attacks.

Let’s give you an attack scenario so that you can easily understand; why this malicious craft attacks:

Malicious Attack Scenario

I am providing you attack scenario time that how it reaches to the internal server. And it doesn’t send a request directly; let’s learn how you can scan the internal network through this process by our experts while you are taking the classes at IICS.

Types of SSRF: there are so many ways to send malicious attacks to your computer, however, I am going to describe these two attacks.

Direct SSRF: this attack confirms and tells you that when this malicious work has been done by hackers.

  • Content-based SSRF: as it shows by the name, which specifies URL and then responses to the server.
  • Boolean based SSRF: it contains HTTP status code. In any case, if the URL is unreachable then it shows code like 404 or 500, which means your request is invalid.

So, if your computer shows these two issues then the attackers start work to hack your server and computer.

If you want to learn these methods, and has the passion to learn more about Ethical Hacking then you should enroll your name at Indian Institute of Computer Science (IICS), which provides the best ethical hacking training in Delhi.