Skip to content

Tracks

AI-assisted engineering Working with AI Agents System design Core systems Data and AI systems Coding Coding problems Code review On-call SQL

Practice

Paths Concept guides

FreeAd-supported

The plan adds AI feedback and removes ads.

Concept guides/Incident response/Server-side request forgery (SSRF)

CodingIncident response

Server-side request forgery (SSRF)

Hard3 min read

Questions it teaches

Redirect to internal networkMedium25 min Image proxy still reaches local files and metadataMedium20 min Localhost bypass with DNSHard30 min DNS rebind bypasses IP checkHard35 min Redirect bypasses host allowlistHard35 min SSRF to credential theftHard45 min Redirect bypass to instance metadataHard45 min SSRF reads instance credentialsHard40 min

Related

Incident response Dependencies and deploys Capacity and traffic Databases in production Messaging and streams Pipelines and analytics Verifying AI output

Builds on: Dependencies and deploys

Configuration errors3 min Environment misconfiguration3 min

Builds on: Capacity and traffic

Log volume management3 min Queue backlog4 min

Builds on: Databases in production

Database disk saturation (IOPS)3 min Database unreachable3 min

Related: Messaging and streams

Designing team chat3 min Real-time personalization4 min

© 2026 Prep Room·From California·AI can make mistakes.

About Legal Contact Cookies Your privacy choices

Home Review Tracks Paths