TryHackMe rooms
Corresponding practice
- Draw the expected request path for a normal server-side fetch and an SSRF attempt.
- On the room target, test one input at a time and record the response evidence used to confirm or reject SSRF.
- Attempt Recruit for 45 minutes before using a hint; keep an ordered attack log.
- For the strongest finding, write one remediation sentence covering allowlists, URL parsing, and network egress controls.
Evidence to capture
- Request-flow diagram
- Recruit enumeration and hypothesis log
- One confirmed observation and one rejected hypothesis
What I learned
Explain how server-side requests differ from browser-side requests and why that matters.
Problems and dead ends
Document the point where independent progress stopped and what evidence was missing.
What I will revisit
Repeat the Recruit attack path from a fresh session if a walkthrough or hint was needed.