LAB 362 – Defending Python APIs from Server Side Request Forgery (NEW)

Course Overview

In this lab, learners will gain hands-on experience in identifying and mitigating Server-Side Request Forgery (SSRF) vulnerabilities in Python APIs. SSRF occurs when an API allows unauthorized HTTP requests, which can expose internal systems or sensitive data.

The primary solution is to enforce strict input validation and eliminate unsafe URL concatenation practices. By working with a vulnerable application in a controlled environment, developers will develop the skills needed to detect, exploit, and prevent SSRF vulnerabilities.