Table of Contents
Basic SSRF against the local server
1: Access the Lab.
Website: https://portswigger.net/web-security/ssrf/lab-basic-ssrf-against-localhost

2: Open the Burp Suite.
3: Open the product.

4: Check the product stock.

5: Check the Post request in the Burp Suite and check the stockApi.

6: Send the stockApi key to the Repeater.
Shortcut key: Ctrl + R

7: Remove the stockApi and Access the localhost admin panel.

8: Delete the carlos user.

9: Send the request.

10: The lab has been completed.


