blockchainmedium
[Blackbox] Web3_Bridge
caplag
Task: DeFi Bridge app with user-controlled RPC URL for transaction verification. Solution: SSRF via 0.0.0.0 bypass to access internal Anvil chain, read flag from contract storage slot using eth_getStorageAt.
$ ls tags/ techniques/
ssrf_via_user_controlled_urlssrf_filter_bypass_alternative_ipeth_getStorageAtbytecode_string_extraction
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]