CSRF and SSRF — Roadmap Step & Resources
Tricking a browser or server into making requests it shouldn't
- Level: intermediate
- Estimated time: 1 days
- Roadmap: Cybersecurity Analyst / Ethical Hacker
Before this step
Study resources
- Cross-Site Request Forgery (CSRF) (Article) — PortSwigger's Web Security Academy guide to CSRF and SSRF vulnerabilities.
- CSRF and SSRF Explained (Video) — Covers how attackers trick browsers and servers into making unintended requests.
- SSRF Cheat Sheet (Article) — OWASP's own official cheat sheet on preventing SSRF vulnerabilities.
Part of
- Web Application Security — section
- Cybersecurity Analyst / Ethical Hacker roadmap — the full learning path