A port scan is one of the most basic and useful activities of network discovery when you are assessing a network. In applications, security assessment is limited to the scope determined in the assessment, but SSRF and XSPA allow users to perform port scanning from the application. To demonstrate how you can perform this technique, we will use a vulnerable test application, created by Acunetix, which you can find at http://testphp.vulnweb.com/.
This is a vulnerable application that you can use to learn some attacks and test scripts or tools, as shown in the following screenshot:
- Open Burp Suite's ...
