SSRF AWS IMDS: Stealing EC2 IAM Credentials with 3 HTTP Requests (and How to Stop It)
📰 Dev.to · Paolo Costanzo
TL;DR: IMDSv1 has no authentication. One SSRF in your app is enough to steal EC2 IAM credentials....
TL;DR: IMDSv1 has no authentication. One SSRF in your app is enough to steal EC2 IAM credentials....