Comment

Comment by ek750

I’m not a security researcher, but a normal backend dev (possibly) This comment intrigued me and led me down the typically great HN rabbit-hole.

I found a couple of sources related to this, fascinating, thank you!

I knew about SSRFs, but the ability of attackers to pivot and stack and chain minor vulnerabilities continues to amaze me.

I hope AWS mitigated this metadata endpoint weakness by now.

parent ek750 4 years ago

Discussion