Using SQL Injection to perform SSRF/XSPA attacks June 27, 2020 in sql injection, ssrf, xspa, cloud, aws, penetration testing, offsec, mysql, oracle, mssql, postgresql, bugbounty A blog post about some post exploitation scenarios with MySQL, MSSQL, PostgreSQL and Oracle that use SQL Injection to make network requests resulting in Server Side Request Forgery/Cross Site Port Attacks. Continue reading