Don’t use PHP for this. Still fun to do though
PHP
Preventing SSRF in Laravel: Why Blocking Private IPs Fails
I found there wasn’t any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf Read more