CVE-2020-10770

This exploit demonstrates a Blind SSRF vulnerability in Keycloak versions < 12.0.2 by crafting a malicious request_uri parameter to trigger an outbound HTTP request to an attacker-controlled server. The PoC requires user input for a Netcat listener to confirm the callback.

This is a functional PoC for CVE-2020-10770, a blind SSRF vulnerability in Keycloak versions < 12.0.2. It exploits the 'request_uri' parameter to trigger outbound HTTP requests to an attacker-controlled host, enabling internal network scanning or data exfiltration.

This repository provides a detailed technical walkthrough for testing CVE-2020-10770, a blind SSRF vulnerability in Keycloak. It includes setup instructions, attack steps, and mitigation strategies, referencing the original researcher's work.