nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqdf0nthpgzfmvxrzj0cfypmmt45l0y770j260auqhm3l45hp3uhkqvrnptm The dangerous case is not that every one of those ranges is equally exploitable. For e...
@洪 民憙 (Hong Minhee) :nonbinary:
>So I would not phrase it as “documentation or multicast addresses are always practical SSRF targets.”
But could they be, even in theory? I found that 100.64.0.0/10 is indeed used for private networks, but it seems that allowing requests to documentation or multicast addresses has no security impact.
>So I would not phrase it as “documentation or multicast addresses are always practical SSRF targets.”
But could they be, even in theory? I found that 100.64.0.0/10 is indeed used for private networks, but it seems that allowing requests to documentation or multicast addresses has no security impact.