Medium
Server-Side Request Forgery
LinkPeek URL preview (SSRF)
A URL-preview tool fetches any link server-side, including internal-only services.
PentestingHere Academy
Official Academy lab
- Attempts
- 3
- Solves
- 2
- Published
- 6 Sep 2026
Scenario
LinkPeek previews any link you paste: you POST /preview.php a url and it fetches that
page on the server and shows you the first part of the body.
Goal
There is an internal metadata service you cannot reach directly. Make LinkPeek fetch it for you and submit the value it returns as the flag.