> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/web-applications/ssrf.md).

# SSRF

With input fields that request URL's add the server itself

```
http://127.0.0.1
```

In Burp you can take the request and through it into ffuf for port fuzzing

```
ffuf -request req -request-proto http -w ~/opt/wordlists/ports.txt:FUZZ -fs 61
```

<figure><img src="/files/3pSwWbAoZ1lw0I8vuE0i" alt=""><figcaption></figcaption></figure>