c0c0n 2020 | RT-WS-1 Advanced SSRF Exploitation

Red Team Village Workshop - 01

Advanced SSRF Exploitation

ABSTRACT

Server-Side Request Forgery (SSRF) is a vulnerability class in which an attacker can make the application send requests on their behalf. As a basic exploitation scenario, an attacker might be able to access internal applications, perform port scan and use the application host as proxy. We will be focusing on advance attack scenarios as well. This workshop will be covering the understanding of Server-Side Request Forgery (SSRF), how to identify the SSRF sink, exploiting SSRF, bypassing SSRF, real-time attack scenarios including the cloud exploitation, risk and remediation. The syllabus as seen below:

1. Basics of SSRF
2. Identifying SSRF Sink
3. Exploiting SSRF
4. Leveraging various URL schema
5. Bypassing SSRF filters
6. Real-time attack scenarios
7. Exploiting SSRF in the Era of cloud
8. Defense against SSRF
9. Interesting Case Studies

The objective of the workshop is to provide hands-on practical experiences to understand SSRF risks. The workshop will start with the basics of SSRF and deep dive into SSRF exploitation and finally remediation.

Speaker

Savan Gadhiya
Principal Security Consultant at NotSoSecure

Savan Gadhiya is working as a Principal Security Consultant at NotSoSecure. He completed his masters in IT Systems and Network Security in 2013. He has more than 6 years of experience in IT Security and 9 years of experience in Information Technology. He is one of the members in developing Advanced Web Hacking Labs of NotSoSecure. He can be found on Twitter @gadhiyasavan. He has delivered a workshop on Server-Side Request Forgery at BSides Ahmedabad 2019 and a few talks in Nullcon monthly meetups.