Server-Side Request Forgery (SSRF) Courses and Certifications

You will learn about Server-Side Request Forgery, what it is and how to prevent it. OWASP Top 10: Server Side Request Forgery covers the 2021 OWASP Top 10 Web Application Security Risks, server-side request forgery. In the 2017 OWASP Top 10, server-si…

• Codecademy
• 1 hour
• On-Demand
• Free Trial Available

Learn to identify and exploit Server-Side Request Forgery (SSRF) vulnerabilities with this 2-3 hour program by Cybrary. Designed for intermediate-level learners, it offers insights into Facebook's SSRF dashboard tool and Apache Solr.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

NahamSec

Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy

Learn the basics of Server Side Request Forgery (SSRF) in less than an hour with NahamSec's concise and practical training.

• YouTube
• 42 minutes
• On-Demand
• Free Online Course

Bugcrowd

Server Side Request Forgery

Learn to identify and prevent Server-Side Request Forgery attacks with Bugcrowd University. Understand how to control outbound server connections and bypass blacklists in under an hour.

• YouTube
• 37 minutes
• On-Demand
• Free Online Course

NahamSec

What is Server-Side Request Forgery - SSRF?

Learn about Server-Side Request Forgery (SSRF) from NahamSec in less than an hour. Ideal for those interested in offensive security and bug bounty.

• YouTube
• 16 minutes
• On-Demand
• Free Online Course

Cyber Mentor

Learn to Hack WebApps - SSRF (Server-Side Request Forgery)

Master server-side request forgery (SSRF) hacking techniques with Cyber Mentor in a concise 2-3 hour program.

• YouTube
• 2 hours 13 minutes
• On-Demand
• Free Online Course

The 3 Way Bypass Surgery - Abusing Content Delivery Networks with Server Side Request Forgery - SSRF

Explore Derbycon 2015 insights on exploiting CDNs via SSRF, in a concise 53-minute session. Learn advanced security techniques.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Hussein Nasser

Popular Web Attacks - XSS, CSRF, SSRF, SQL Injection, MIME Sniffing, Smuggling and More

Learn about popular web attacks like XSS, CSRF, SSRF, SQL Injection, and more in this 1-2 hour online program by Hussein Nasser.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Free Online Course

Black Hat

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Learn to exploit URL parsers in popular programming languages and bypass SSRF protections with Black Hat's concise, less than 1-hour material.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web

Explore API security, defensive programming, and software vulnerabilities with Black Hat's brief, engaging material, featuring demos and actionable insights.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper

Piercing the Veil - Server Side Request Forgery Attacks on Internal Networks

Learn ethical hacking, SSRF attacks, and mitigation strategies in less than an hour with Cooper's concise program. Ideal for cybersecurity enthusiasts.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

SSRF PWNs - New Techniques and Stories

Explore SSRF attacks, their practical use in information security, and new techniques with experts from Hack In The Box Security Conference. Less than 1 hour.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

When TLS Hacks You

Explore how to leverage TLS as an attack vector in this under 1-hour material by Black Hat. Learn novel, cross-platform ways to target internal services.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Owning the Cloud Through SSRF

Learn about cloud metadata and SSRF from Cody Brocious at the 44CON Information Security Conference. Master hacking techniques in under an hour.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore offensive security with NahamSec's under 1-hour material, focusing on finding 0days in enterprise web applications. Learn from live sessions every Sunday on Twitch.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk