3 ms·
Definitely been meaning to test out Amazon's V2 metadata service. I presented some research last year on misconfigured reverse proxies [0] that allowed access
by opsdisk 7y ago
Definitely been meaning to test out Amazon's V2 metadata service. I presented some research last year on misconfigured reverse proxies [0] that allowed access to the metadata URL within AWS, Azure, and Digital Ocean. Not sure if a hardened service is on the roadmap for Azure or Digital Ocean though, so this could fill that gap.
[0] https://github.com/opsdisk/cloud_metadata_extractor/blob/master/abusing_cloud_metadata_urls-bsides_satx_2019.pdf https://github.com/opsdisk/cloud_metadata_extractor/blob/mas...