blockchainPromedium

[Blackbox] Web3_Bridge

caplag

Task: DeFi Bridge app with user-controlled RPC URL for transaction verification. Solution: SSRF via 0.0.0.0 bypass to access internal Anvil chain, read flag from contract storage slot using eth_getStorageAt.

$ ls tags/ techniques/
ssrfblockchainip_bypassweb3anviljson-rpcstorage_read
ssrf_via_user_controlled_urlssrf_filter_bypass_alternative_ipeth_getStorageAtbytecode_string_extraction
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups