/ssrf-playground

A playground to practice SSRF Attacks against web apps

Primary LanguageGo

SSRF Playground

SSRF Playground is a platform to practice exploitation and testing for Server Side Request Forgery issues in web applications.

How to play?

Run the server by typing go run .

There are different challenges with varying level of difficulty. The end goal is accessing a service running at localhost to get the flag.

http://localhost:8082/flag

The flag is randomly generated with a hash of timestamp at the end.

Have fun playing. The UI is accessible at http://localhost:8001/

Contributing

The project is still in very early stage hence contributions are more than welcomed.