OSWE SSRF Vulnerability Assessment Quiz

1. What is DNS rebinding in the context of SSRF?

Changing DNS records to point to internal IPs

Redirecting external domain to internal addresses during lookup

Encrypting DNS queries

Blocking DNS resolution attempts

Submit

3. True or False: Disabling outbound network access entirely is a practical SSRF mitigation.

True

False

4. What is the primary risk of SSRF vulnerabilities in cloud environments?

Exposure of cloud metadata and API credentials

Loss of client data

Increased DNS queries

Slower network performance

5. Which HTTP redirect technique can be abused in SSRF exploitation?

301 Moved Permanently

302 Found redirects to internal IPs

304 Not Modified

307 Temporary Redirect

Submit

7. What network range represents private IP addresses that SSRF filters should block?

10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16

8.8.8.8/32 only

224.0.0.0/4 only

192.0.2.0/24 only

8. True or False: Blocking the 127.0.0.1 address is sufficient to prevent all SSRF attacks.

True

False

9. Which mitigation prevents SSRF attacks by validating target URLs against a whitelist?

Input filtering

URL whitelisting

Rate limiting

Session management

Submit

11. What is a Server Side Request Forgery (SSRF) vulnerability?

A flaw allowing attackers to forge client-side HTTP requests

A weakness enabling attackers to make HTTP requests from the target server

An attack that modifies server configuration files

A vulnerability in SSL/TLS certificate validation

12. Which bypass technique converts 127.0.0.1 to its hexadecimal or octal representation?

Unicode encoding

Base64 encoding

IP address obfuscation

DNS rebinding

13. True or False: Using IP addresses like 127.0.0.1 in SSRF payloads is always blocked by modern applications.

True

False

14. What is a blind SSRF vulnerability?

SSRF where the attacker receives no response from the server

SSRF limited to internal networks only

SSRF that requires user interaction

SSRF using encrypted connections

Submit

16. Which URL scheme bypass might be used to access file systems in SSRF attacks?

Http://

File://

Https://

Ftp://

17. True or False: SSRF vulnerabilities can only affect HTTP services.

True

False

18. What does the SSRF bypass technique using URL encoding help circumvent?

Firewall rules

Input validation filters

SSL certificate pinning

DNS resolution

Submit

20. Which of the following is a common SSRF attack target?

Internal metadata endpoints like AWS EC2 metadata service

External CDN services

Client browser caches

DNS root nameservers

OSWE Server Side Request Forgery Quiz

1. What is DNS rebinding in the context of SSRF?

2.

What first name or nickname would you like us to use?

2. In SSRF testing, using a callback service or out-of-band (OOB) channel helps detect ______ SSRF.

3. True or False: Disabling outbound network access entirely is a practical SSRF mitigation.

4. What is the primary risk of SSRF vulnerabilities in cloud environments?

5. Which HTTP redirect technique can be abused in SSRF exploitation?

6. SSRF can be exploited to perform ______ attacks against internal services.

7. What network range represents private IP addresses that SSRF filters should block?

8. True or False: Blocking the 127.0.0.1 address is sufficient to prevent all SSRF attacks.

9. Which mitigation prevents SSRF attacks by validating target URLs against a whitelist?

10. SSRF vulnerabilities often exist in applications that fetch or process ______ from user input.

11. What is a Server Side Request Forgery (SSRF) vulnerability?

12. Which bypass technique converts 127.0.0.1 to its hexadecimal or octal representation?

13. True or False: Using IP addresses like 127.0.0.1 in SSRF payloads is always blocked by modern applications.

14. What is a blind SSRF vulnerability?

15. An attacker uses SSRF to access https://169.254.169.254/latest/meta-data. What is the target?

16. Which URL scheme bypass might be used to access file systems in SSRF attacks?

17. True or False: SSRF vulnerabilities can only affect HTTP services.

18. What does the SSRF bypass technique using URL encoding help circumvent?

19. SSRF attacks can be used to access internal services on ______ addresses.

20. Which of the following is a common SSRF attack target?