Server Side Request Forgery (SSRF) tricks your own server into fetching malicious URLs — leaking cloud credentials, exposing internal services, and bypassing firewalls. This guide walks through a real vulnerable Python app, explains every attack vector.