Skip to content
ssrf.payloads

Posts tagged: #ssrf

← Back to all posts
Exploiting Cloud Metadata via SSRF: 169.254.169.254 on AWS, GCP, and Azure
How SSRF turns into stolen cloud credentials through the 169.254.169.254 metadata endpoint. IMDSv1 vs IMDSv2, the GCP header requirement, Azure quirks, and why IMDSv2 still gets popped.
ssrfcloud-securityawsimds
SSRF Filter Bypass: Beating Allow-Lists, Blocklists, and Parser Mismatches
Why SSRF filters fail in practice. Parser confusion, IP encoding, DNS rebinding, and redirect chains explained from the attacker's side, with the defensive fixes that actually hold.
ssrffilter-bypassweb-securitypentesting
SSRF Payload Cheat Sheet: Encodings, Bypasses, and What Actually Lands
A working SSRF payload list from real engagements: IP encoding tricks, allow-list bypasses, protocol smuggling, and the cloud metadata endpoints worth memorizing.
ssrfpayloadsweb-securitypentesting