Skip to content
ssrf.payloads

Posts tagged: #cloud-security

← Back to all posts
Exploiting Cloud Metadata via SSRF: 169.254.169.254 on AWS, GCP, and Azure
How SSRF turns into stolen cloud credentials through the 169.254.169.254 metadata endpoint. IMDSv1 vs IMDSv2, the GCP header requirement, Azure quirks, and why IMDSv2 still gets popped.
ssrfcloud-securityawsimds