SSRF via URL Parameter
Make the server fetch what it shouldn't. Internal targets are simulated safely inside the drill.
An endpoint fetches a user-supplied URL. Pivot it to reach an internal service and retrieve the flag — all simulated inside the isolated box, never a real external system.
What you'll practice
ssrfserver-side request forgeryweb exploitation
medium
SSRF via URL Parameter
Make the server fetch what it shouldn't. Internal targets are simulated safely inside the drill.
Objective
Recover the flag at /root/flag.txt and submit it.
Drill this now
Spin up a live isolated target and start practicing in seconds — free.