What is Server-Side Request Forgery (SSRF)?
- A Tricking a server into making requests to internal resources on the attacker's behalf
- B Forging a client certificate
- C Injecting SQL into a server
- D Overloading a server with requests
Answer
Tricking a server into making requests to internal resources on the attacker's behalf
SSRF is particularly dangerous in cloud environments where internal metadata endpoints can expose credentials. Allowlisting outbound destinations is the defence.





