SSRF vulnerabilities and where to find them