Skip to content

Glossary: Application and Credential Attacks, and AI Risks

Host addresses (127.0.0.1, localhost)

Also written: localhost, 127.0.0.1, loopback address

127.0.0.1, also called `localhost`, is the address a machine uses to reach itself, so it shows up as the client address when a lab tool talks to a server on the same machine. If a server is made to send requests to `localhost` or other internal addresses, that is a sign of server-side request forgery (SSRF).

Where the book teaches it

Related terms

server-side request forgery (SSRF)metadata service