Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF - but the visible image_url parameter isn't the one actually wired up in the code; fuzzing form ...
Source: [Dev.to](https://dev.to/exploitnotes/tryhackme-the-london-bridge-writeup-3cf4)