4 ms·

This is actually a vulnerability I've seen countless times. If a site accepts a URL which it reads and returns to the user, submit the 169.254.169.254 metadata

This is actually a vulnerability I've seen countless times. If a site accepts a URL which it reads and returns to the user, submit the 169.254.169.254 metadata service. About 1 out of 5 times I've tried it, I'm about to get a response.

startling 10y ago
Sometimes you can do this with things like smtp servers as well.
stevekemp 10y ago
I think that's another example of bad filtering, same thing that happens if you accept an URL and don't disallow `file:///etc/passwd`.