Understand and mitigate the risks of Server-Side Request Forgery (SSRF) in Spring Boot applications. This course covers detection, prevention, secure coding practices, and more.
Overview
Syllabus
- Unit 1: Introduction to SSRF
- Building an SSRF Vulnerability Detector
- Detecting Unsafe URL Schemes
- Combining URL Validation and Security Checks
- Protecting Server-Side Requests with URL Validation
- Unit 2: Preventing SSRF in Java Web Applications
- Implementing Basic Input Validation for SSRF Protection in Spring Boot
- Implementing URL Parsing and Protocol Validation
- Implementing Domain Whitelist Validation
- Block Requests to Private IP Addresses
- Comprehensive SSRF Defense Implementation
- Unit 3: Monitoring and Responding to SSRF Incidents
- Implementing Request Logging for SSRF Attack Detection
- Enhancing SSRF Detection Patterns
- Configure Email Alerting with Environment Variables for SSRF Detection
- SSRF Incident Logging System
- Building an Admin Incidents API with Filtering
- Unit 4: Security Logging and Monitoring
- Implementing HTTP Request Logging for Security Monitoring
- Configure Separate Error and Combined Log Files in Logback
- Implementing Custom SSRF Detection Filter in Spring Boot
- Real-Time Log Monitoring with WebSocket
- Email Alert System for SSRF Security Events