Skip to main content

Routing-based SSRF

$ tldr PortSwigger · HTTP Host Header Attacks

Solve the lab

Resources by skill

HTTP Host Header Attacks · Server-Side Request Forgery

Comments & tips

Solved this lab a different way? Share it here — comments live in GitHub Discussions.
Last updated: 2026-05-08