The XSS Rat
CWAP · Module 08 — SSRF

Attack 2 — Blind SSRF, when nothing comes back

Animated, step-by-step: no response body, so the out-of-band callback becomes the proof — then timing turns the sink into an internal port scanner.
Module 08SSRFBlind / OOBHigh
—

—

—

◤ Attacker workstation

🐀
you
idle
—

◤ On the wire

◤ Server

key material
—
waiting
attacker
server
hunter@cwap — bash
1× 0:00 / 0:00 step 1 / 1