Made an educational write-up about finding and exploiting SSRF vulnerabilities in web applications. Check it out here: cybereagle.io/blog/finding-a…

Found some Gophish admin panels with default credentials. Leaking emails, passwords, usernames. How to report something like this? Whois information doesn't seem to useful.