10.1 Lab: Basic SSRF against the local server | 2023

This lab has a stock check feature which fetches data from an internal system.To solve the lab, change the stock check URL to access the admin interface at http://localhost/admin and delete the user Carlos | Karthikeyan Nagaraj

Description

This lab has a stock check feature which fetches data from an internal system.

To solve the lab, change the stock check URL to access the admin interface at http://localhost/admin and delete the user carlos

Solution

1. Click a Product and Check out the Stock Checking Functionality
2. Capture the request, you can see that there is a parameter called stockAPI which has a encoded string
3. Send the request to the decoder and click smart decode to decode the string and know that it is directing to an internal page
4. So now, change the stockAPI parameter to http://localhost/admin as given in Lab description and send the request
5. Now you can able to see that the response is successful and on inspecting the code you can get the URL to delete user Carlos
6. If you are using a professional version, you can render the response for a better result
7. Copy the URL that we found on 4th step’s response
8. Now Paste it on the stockAPI Parameter to solve the Lab

Cyberw1ng

If you would like to support me so that I could create more free content — https://www.buymeacoffee.com/cyberw1ng

Thank you for Reading!

Happy Hacking ~

Author: Karthikeyan Nagaraj ~ Cyberw1ng

Telegram Channel for Ethical Hacking Dumps — https://t.me/ethicalhackingessentials