> For the complete documentation index, see [llms.txt](https://shadowforge.gitbook.io/shadowforge-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shadowforge.gitbook.io/shadowforge-writeups/bugforge.io/readme.txt/daily-labs/ssrf/tanuki.md).

# Tanuki

> Today the hint was ***web***, but pretty quick I realised it was BugForge's first ever ***SSRF*** lab.

When opening up the lab, I immediatly saw the new feature 'Leaderboard'. So I was pretty sure that it was there that I needed to look.

In BurpSuite I saw a POST request, with an URL. So now I was certain I had to try ***SSRF***.

<figure><img src="/files/9Bz9zyvbEMA0s2cL8M4r" alt=""><figcaption></figcaption></figure>

First thing I tried was reaching an `/admin` endpoint.

<figure><img src="/files/U6MNXUjJfQSOI2Dg3yY4" alt=""><figcaption></figcaption></figure>

And so I rather quickly solved that SSRF lab and got my flag 🇧🇪