How To Exploit SSRF To Fetch AWS Credentials
This video covers SSRF vulnerability and how you can exploit it to fetch AWS meta data and credentials.
.
.
.
Blogs: / medusa0xf
.
.
.
Social media:
Twitter: / medusa_0xf
.
.
.
Discord: / discord
.
.
Links in the video:
/ bypassing-ssrf-protection-to-exfiltrate-aw...
/ ssrf-attack-leading-to-aws-metadata
https://hackerone.com/reports/1624140
.
.
.
Introduction: 0:00
Lab: 0:58
SSRF to fetch AWS meta data: 3:48
Magic IP: 4:54
Fetching IAM credentials: 7:36
Like and Subscribe :)
.
.
.
Music: Karl Casey @ White Bat Audio
#api #owasp #portswigger #bugbounty #bola #postman #pentesting #api #hack #bola #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass