A Detailed Guide to the OWASP Top 10 - API7:2023 Server Side Request Forgery

The video tutorial explains Server-Side Request Forgery (SSRF) vulnerabilities, where an API fetches remote resources without validating user-supplied URLs. This can allow attackers to send crafted requests to unexpected destinations, even bypassing firewalls. An example is given using a social network site where users upload profile pictures. Attackers can exploit this by sending malicious URLs to initiate port scanning. The video also covers how attackers detect open ports and services based on server response times. To prevent SSRF, it is crucial to validate and sanitize client input, disable HTTP redirections, isolate resource fetching, and avoid sending raw responses to clients.

What is a key characteristic of SSRF vulnerabilities?

• They occur when a server validates user-supplied URLs.

• They involve client-side scripting errors.

• They occur when an API fetches a resource without validating the URL.

• They are related to database injection attacks.

In the context of SSRF, what can an attacker achieve by using a crafted URL?

• Gaining administrative access to the server.

• Initiating a port scan within the internal network.

• Performing a denial-of-service attack.

• Accessing the server's file system directly.

How can an attacker determine if a port is open using SSRF?

• By checking if the server responds with a 404 error.

• By analyzing the time it takes for the server to respond.

• By receiving a direct confirmation from the server.

• By observing changes in the server's IP address.

Which of the following is a recommended practice to prevent SSRF vulnerabilities?

• Allowing all HTTP redirections.

• Fetching resources from internal network locations.

• Validating and sanitizing all client-supplied input data.

• Providing detailed error messages to clients.

Why should raw responses not be sent to clients in the context of SSRF prevention?

• They can reveal sensitive information about server services.

• They increase the server's response time.

• They can lead to data corruption.

• They are not compatible with all client devices.