Server-Side Request Forgery

A defect where an application fetches an attacker-supplied URL, letting them reach internal services, cloud metadata, or link-local ranges.

See a verified Server-Side Request Forgery exploit

Pentrova surfaces Server-Side Request Forgery findings with a replayable PoC artifact and the chain resolver escalates confirmed findings into business impact.

Join the waitlist Read the glossary entry

/* When JS is disabled the IntersectionObserver never runs, so the `opacity: 0` initial state of reveal elements would hide content permanently. Snap everything visible. */ .scroll-reveal, [data-reveal], .reveal-group > .reveal { opacity: 1 !important; transform: none !important; animation: none !important; } .section-rule { transform: scaleX(1) !important; }