DARKNET HACKINGINSTITUTION
DH Labs
SERVER / WEB SECURITY

Server-Side Request Forgery

Server-side URL fetching and destination controls.

STUDENT PROGRESS— / 1
AVAILABLE1 labs
PRACTICE PATH

Labs in this topic

1 available Sign in to save progress

01
APPRENTICESIGN IN TO TRACK

Constrain server-side URL fetching

Inspect a simulated URL preview feature and choose its primary network guard.

APP: Cedar Preview/3 progressive hints
View lab details
DH LABS / LAB BRIEF
APPRENTICESIGN IN TO TRACK

Constrain server-side URL fetching

Inspect a simulated URL preview feature and choose its primary network guard.

TRAINING APPLICATIONCedar Preview
ENTRY ROUTE/
DIFFICULTYAPPRENTICE
HINTS AVAILABLE3 progressive hints

What you will do

  1. The request destination is user controlled.
  2. Application validation should be paired with network egress controls.
  3. Restrict requests to approved destinations and block private ranges.
Show full walkthrough and solution
  1. Open the Cedar Preview destination-review scenario.
  2. Review the missing destination and egress rules.
  3. Submit egress-allowlist.
  4. The local checker confirms the design; no URL is fetched.

Private disposable practice instance, isolated from external services and real accounts. Student login is required to start this lab and track progress.

Lab details are available without an account. Student login is required to start and save progress.