Other nomination

Paper on Hacking Intranets Using Websites (Not Web Browsers)

Pointer post announcing RSnake's SecTheory paper on hacking intranets with websites rather than browsers: the web server, not the victim's browser, is coerced into reaching internal hosts, reusing the browser-based intranet techniques server-side. The paper itself is hosted off-site and is not archived here.

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Related sources

• Research paper

Tags

• ssrf
• abuse-of-functionality
• injection
• case-study
• prior-art-extension
• owasp-a03-2021
• owasp-a04-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.