{"author_name":"ThisIsOne","height":"190","description":"Hello there, ('\u03c9')\u30ce \u3053\u306e\u30e9\u30dc\u3067\u306f\u3001Blind SSRF\uff08\u30d6\u30e9\u30a4\u30f3\u30c9SSRF\uff09\u3092\u5229\u7528\u3057\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u5916\u90e8\u30b5\u30fc\u30d0\u30fc\u3078\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5f37\u5236\u3059\u308b\u3053\u3068\u304c\u76ee\u7684 \u3067\u3059\u3002 \u305f\u3060\u3057\u3001SSRF\u306e\u7d50\u679c\uff08\u30ec\u30b9\u30dd\u30f3\u30b9\uff09\u306f\u653b\u6483\u8005\u306b\u8868\u793a\u3055\u308c\u306a\u3044 \u305f\u3081\u3001Burp Collaborator\u3092\u5229\u7528\u3057\u305fOut-of-Band\uff08OAST\uff09\u653b\u6483 \u3067\u8106\u5f31\u6027\u3092\u691c\u8a3c\u3057\u307e\u3059\u3002 \ud83d\udd0d \u653b\u6483\u306e\u6d41\u308c \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u52d5\u4f5c\u3092\u78ba\u8a8d Referer\u30d8\u30c3\u30c0\u30fc\u306b\u6307\u5b9a\u3055\u308c\u305fURL\u306b\u5bfe\u3057\u3066\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u304c\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b \u4ed5\u7d44\u307f\u3092\u5229\u7528\u3059\u308b\u3002 Burp Collaborator\u3092\u5229\u7528\u3057\u3066\u3001\u5916\u90e8\u30b5\u30fc\u30d0\u30fc\u3078\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u691c\u51fa Referer\u30d8\u2026","url":"https://cysec148.hatenablog.com/entry/2025/03/13/071029","version":"1.0","provider_url":"https://hatena.blog","author_url":"https://blog.hatena.ne.jp/ThisIsOne/","image_url":null,"width":"100%","categories":["Web Security Academy","SSRF"],"published":"2025-03-13 07:10:29","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fcysec148.hatenablog.com%2Fentry%2F2025%2F03%2F13%2F071029\" title=\"LAB: Blind SSRF with Out-of-Band Detection - Shikata Ga Nai\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"Shikata Ga Nai","provider_name":"Hatena Blog","blog_url":"https://cysec148.hatenablog.com/","type":"rich","title":"LAB: Blind SSRF with Out-of-Band Detection"}