Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: SSRF via OIDC dynamic registration - no well-known

sunny | Last updated: Feb 14, 2021 08:52AM UTC

Hi, I believe the current image of the lab is having some issue: it does not seem to have the /.well-known folder Can you pls check? thank you so much!

Uthman, PortSwigger Agent | Last updated: Feb 15, 2021 09:37AM UTC

Hi Sunny, The lab appears to be functioning as expected. Are you replacing 'YOUR-LAB-OAUTH-SERVER' with the ID of your labs OAUTH server? This would be the string before '.web-security-academy.net' in the URL when you select 'Login with social media'. You should notice that this is different from the main lab ID (i.e. that of the homepage).

sunny | Last updated: Feb 18, 2021 02:20PM UTC

oops, you are absolutely correct, my bad! thank you so much! :)

sunny | Last updated: Feb 18, 2021 02:20PM UTC

oops, you are absolutely correct, my bad! thank you so much! :)

Uthman, PortSwigger Agent | Last updated: Feb 18, 2021 02:23PM UTC