Blind SSRF with Shellshock exploitation

PortSwigger Web Security Academy lab: Blind SSRF with Shellshock exploitation. Topic: SSRF (Server-Side Request Forgery).

Blind SSRF with Shellshock exploitation

$ tldr PortSwigger · SSRF (Server-Side Request Forgery)

·	·
Platform	PortSwigger Web Security Academy
Topic	SSRF (Server-Side Request Forgery)
Difficulty	APPRENTICE
Official lab	Open

Solve the lab

Language	Author	Format	Link
🇬🇧 EN	PortSwigger	Texto	Open

Resources by skill

Skill	Source	Link
Shellshock (CVE-2014-6271)	HackTricks	Open
Shellshock (CVE-2014-6271)	Exploit-DB	Open
Server-Side Request Forgery	HackTricks	Open

Related skills

Shellshock (CVE-2014-6271) · Server-Side Request Forgery

---

Comments & tips

Solved this lab a different way? Share it here — comments live in GitHub Discussions.

Last updated: 2026-06-07