SSRF Explained: How Attackers Make Servers Fetch Secrets for Them
Server-Side Request Forgery (SSRF) lets attackers trick a server into making requests on their behalf — reaching internal systems, cloud credentials, and more.
Exploitation
2 articles
XSS Explained: How Attackers Inject Code Into Your Browser
Cross-Site Scripting (XSS) lets attackers inject malicious JavaScript into web pages viewed by other users — stealing sessions, redirecting victims, and taking over accounts.