A handy-looking tool. In cloud infrastructure having a server side request forgery vulnerability can be fatal as it allows accessing the metadata service. Capital One was owned through one.
This tool allows turning vulnerable victim systems into a proxies which allows accessing systems in the internal network, including the metadata service.
This tool allows turning vulnerable victim systems into a proxies which allows accessing systems in the internal network, including the metadata service.
Great R&D work!