SSRF 0x01

First try the application

Looks like the request is communicating with api

We can see that we have admin.php in that api directory but 403 request means we cant access

But when we manipulate the request now we can actually access the admin.php

through the application that is communication with api

now we can find for some localhost file or something

Last updated