SSRF
Medium · SSRF

Webhook Tester Reaches Local Admin

NotifyHub's webhook tester performs server-side HTTP requests. Its integration history still contains a localhost health-check URL from an old on-prem deployment.

Objective

Use information already visible in the application to map the localhost service and reach its internal administration status endpoint.

Target

FetchLab apps

Launch target

Submit flag