Course
This challenge covers the CVE-2021-40438 vulnerability, which can be exploited to trigger a Server-Side Request Forgery (SSRF) and gain access to internal or external applications. We will leverage Apache's mishandling of <code>unix:</code> handlers in URLs to execute this exploit.
Skills covered
Injection
Network
CWE-918
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.
