# Lab: Basic SSRF against the local server

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FxGRYfftq5ptPPDl5uSJL%2Fimage.png?alt=media&#x26;token=e00a4aac-087d-434e-835f-5246884053e9" alt=""><figcaption></figcaption></figure>

the web application have a stock functionality&#x20;

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FFzyp8ByecLvf7qe4r05l%2Fimage.png?alt=media&#x26;token=bc506aa5-8d89-4ef5-bf3b-209ee8f9dc89" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FDpJnmalox1NKRDnU208U%2Fimage.png?alt=media&#x26;token=a7357b91-6079-422a-81d5-900ae41e2639" alt=""><figcaption></figcaption></figure>

decode the url&#x20;

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F76eQhO5Ypw9deeWVTXwC%2Fimage.png?alt=media&#x26;token=7986ddd4-bdda-4420-9c89-7bf8ec28f9d6" alt=""><figcaption></figcaption></figure>

change the url to&#x20;

then just decode it using crtl+u -> it will decode as url

```
http://localhost/admin
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FpCp6OsJvV4GAUgC7uIi6%2Fimage.png?alt=media&#x26;token=12d78cb6-d6e2-4f58-bded-c9783ba5120d" alt=""><figcaption></figcaption></figure>

we can see that we can delete the user carlos in the url that is being provided

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FMROvLEgeMFCWGh0HPRVi%2Fimage.png?alt=media&#x26;token=543d8c64-3f4f-4324-a888-9fcedbfed62b" alt=""><figcaption></figcaption></figure>

change the url to that

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FR71GjacSbingGoiNgKCv%2Fimage.png?alt=media&#x26;token=095a54dc-8ae7-4749-bf2c-928d1e77d1ab" alt=""><figcaption></figcaption></figure>

then we solve the lab since we deleted the user carlos

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FiUjEcXBTdPkRRCofCePr%2Fimage.png?alt=media&#x26;token=328899cf-b5b1-4372-91e9-3e67d0e757e8" alt=""><figcaption></figcaption></figure>

we can verify this by visitng the admin panel again

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FTbL2FyvnW5nD2rx9Ud2S%2Fimage.png?alt=media&#x26;token=7ea8d31f-00b2-4373-b37b-1600b80a71de" alt=""><figcaption></figcaption></figure>
