An attack that uses a server as a stepping stone to reach internal resources it shouldn't be able to access.
Short for Server-Side Request Forgery. It makes a server issue an arbitrary request, aiming for unauthorized access to the internal network or metadata. In cloud environments, a common target is the instance metadata service (such as 169.254.169.254), which can expose credentials and lead to a serious information leak.
© 2026 ITBGM