Blind SSRF

/blind · sink: httpx.get

Server fetches the URL but tells you nothing about the response.


Hint

There's no body, no length, no timing variation. Use Burp Collaborator, interactsh, or any out-of-band callback you control. The server will hit it.

View source for this lab →