Skip to content

Author

Andrii Korkoshko

2 papers indexed here

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

#software testing Open access Sep 2026

Closing SSRF in customer-configurable webhooks: a four-layer guard with connect-time DNS pinning

Webhook features let customers register a URL that a service will call. Because the URL is attacker-controlled and the request originates inside the service's network, every webhook feature is a server-side request forgery (SSRF) surface. This report describes a guard that closed a practical SSRF hole in a SaaS backend...

Andrii Korkoshko · 0 citations
#software testing Open access Sep 2026

Closing SSRF in customer-configurable webhooks: a four-layer guard with connect-time DNS pinning

Webhook features let customers register a URL that a service will call. Because the URL is attacker-controlled and the request originates inside the service's network, every webhook feature is a server-side request forgery (SSRF) surface. This report describes a guard that closed a practical SSRF hole in a SaaS backend...

Andrii Korkoshko · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.