Forum Discussion

pcarra1's avatar
pcarra1
Bronze I
10 months ago
Solved

Server-Side Request Forgery Web App Hacking

I've been banging my head against this for a few hours now and worked my way all the way through to step 7.  I am not able to retrieve /tmp/token.txt.  I've tried modifying the "url" param key and fo...
challenges
  • AtakanBal's avatar
    AtakanBal
    10 months ago

    Hi pcarra1,

    Yes, it’s about modifying the URL value, but not through directory traversal or bypassing filters. There’s another method you can use that involves a different URI scheme other than "http". The briefing section includes an example of this.

AtakanBal's avatar
AtakanBal
Icon for Advocate rankAdvocate
10 months ago

Hi pcarra1,

Yes, it’s about modifying the URL value, but not through directory traversal or bypassing filters. There’s another method you can use that involves a different URI scheme other than "http". The briefing section includes an example of this.

pcarra1's avatar
pcarra1
Bronze I
10 months ago

I figured it out..... for the life of me I swear I tried that before posting.  Persistence is key thanks for the reply!