Jun 1, 2023
Completely agree my friend but when the ping back points to the domain you are hunting rather than 3rd party, then it is a valid SSRF. Hope that make sense.
Written by Jerry Shah (Jerry)
OSCP+ | OSCP | CRTP | eWPTXv2 | PNPT | CRTSv2 | CRTA | C-AI/MLPen | CAPen | CLLMSP | CTIGA | eJPTv2 | MCRTA | CRT-COI | CAP | CNSP | C3SA