← back to room
SSRF
SSRF Port Scanning
Scenario
FetchBot's health checker reports how long each target took to respond. Open ports answer quickly; closed ones time out. Discover which common database port appears open on localhost.
Your approach
- Submit several localhost URLs with different port numbers.
- Compare response times or status messages between ports.
- Identify the port that behaves like an open service.
- Submit only the port number as your answer.
Timing reveals open internal ports. Try hosts like http://127.0.0.1:6379 vs http://127.0.0.1:9999.
Sandbox note: all fetches hit a simulated internal network; no real requests leave the server.
Sandbox note: all fetches hit a simulated internal network; no real requests leave the server.