SSRF
SSRF After getting access to the environment and finding a cloud container doing a basic enumeration, I discovered it is vulnerable to SSRF. Notice in image 1-1 a directory named metadata-db possibly has sensitive inform
$ ls ./cloud-security/
Cloud Pentesting
Cloud and container security research, including SSRF and metadata abuse.
Cloud and container security research — SSRF, metadata services, and misconfigured cloud assets.