IMDS

Cloud Security

Abusing AWS Instance Metadata (IMDS) and SSRF

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security

AWS EKS Security: IRSA and Pod Identity

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Web Exploitation

SSRF Deep Dive: Pivoting to Cloud Metadata, Internal Scans, and Filter Bypass

A practical guide to Server-Side Request Forgery: cloud metadata theft, internal port scanning, filter bypass, and Blue Team defenses.
Cloud Security

Abusing Azure Managed Identities: From IMDS Token Theft to ARM Takeover

How attackers steal IMDS access tokens from Azure Managed Identities and pivot into the ARM API, plus blue-team detection.
Cloud Security

Cloud Metadata Service (IMDS) Attacks via SSRF: Stealing Credentials and Defending IMDSv2

How attackers pivot from SSRF to cloud credential theft through 169.254.169.254, and how IMDSv2 and hop limits stop them.