webPromedium

Curl

spbctf

Task: Web app fetches user-provided URLs via PHP curl with protocol validation. Solution: Bypassed HTTP-only check using open redirect to file:// protocol via CURLOPT_FOLLOWLOCATION misconfiguration.

$ ls tags/ techniques/
ssrffile_readphpapachecurlredirect_bypassprotocol_bypassopen_redirectcurlopt_followlocationcurlproto_all
local_file_readssrf_via_redirectprotocol_bypass_via_open_redirectcurl_misconfiguration_exploit
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups