nerdexam
EC-Council

312-50V12 · Question #49

Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this

The correct answer is B. Server-side request forgery (SSRF) attack. SSRF vulnerabilities evolve in the following manner. Generally, server-side requests are initiated to obtain information from an external resource and feed it into an application. For instance, a designer can utilize a URL such as https://xyz.com/feed.php?url=externalsite.com/fee

Submitted by parkjh· Mar 4, 2026Web Application Hacking

Question

Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com/feed.php?url=externalsite.com/feed/to to obtain a remote feed and altered the URL input to the local host to view all the local resources on the target server. What is the type of attack Jason performed in the above scenario?

Options

  • AWeb server misconfiguration
  • BServer-side request forgery (SSRF) attack
  • CWeb cache poisoning attack
  • DWebsite defacement

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    81% (30)
  • C
    3% (1)
  • D
    11% (4)

Explanation

SSRF vulnerabilities evolve in the following manner. Generally, server-side requests are initiated to obtain information from an external resource and feed it into an application. For instance, a designer can utilize a URL such as https://xyz.com/feed.php?url=externalsite.com/feed/to to obtain a remote feed. If attackers can alter the URL input to the localhost, then they can view all the local resources on the server.

Topics

#Web application security#SSRF#Server-side request forgery#Web server exploitation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice