How We Audited a High-Traffic Python Enterprise Stack on Google Cloud and Mitigated Server-Side Request Forgery (SSRF) in webhook parsers
Initial Stack Assessment and Vulnerability Discovery Our engagement began with a deep dive into a high-traffic Python enterprise application hosted on Google Cloud Platform (GCP). The primary concern was a recent surge in suspicious outbound network activity, hinting at potential Server-Side Request Forgery (SSRF) vulnerabilities. The stack comprised a Django monolith, Celery for background tasks, […]