Cloud Pentesting

Cloud and container security research, including SSRF and metadata abuse.

Cloud and container security research — SSRF, metadata services, and misconfigured cloud assets.

highOct 27, 2024

SSRF

SSRF After getting access to the environment and finding a cloud container doing a basic enumeration, I discovered it is vulnerable to SSRF. Notice in image 1-1 a directory named metadata-db possibly has sensitive inform

#cloud_security