Bug Bounty: Exploiting AWS Cloud WebApps with SSRF

Can Hackers Really Steal AWS Accounts This Easily? (SSRF via IMDSv1) | Bug Bounty This technical deep-dive explores Server-Side Request Forgery (SSRF) vulnerabilities targeting AWS Instance Metadata Service version 1 (IMDSv1), a critical security issue that affects cloud applications worldwide. Through practical demonstration and analysis, we'll examine how this vulnerability works, its potential impact, and effective mitigation strategies. Try it out yourself: https://github.com/ethicalPap/IMDSv1_... ---------------------------------------------------------------------------------- Timestamps: 0:46 Instance Metadata Service (IMDS) Explained 2:03 How SSRF is possible with IMDS 2:41 setting up AWS vulnerable environment with Terraform 5:53 Implementing SSRF Attack 13:29 Destroying the Demo Environment 14:36 How to mitigate this vulnerability 16:35 Outtro ---------------------------------------------------------------------------------- Social Link: Github https://github.com/ethicalPap LinkedIn   / vankperry   Research Profile: https://orcid.org/0009-0001-5052-6882 Join our community! Discord   / discord   ---------------------------------------------------------------------------------- Website: https://projectpapsec.com Business Email: ethicalpap@gmail.com ---------------------------------------------------------------------------------- Video Editor: filmzjasper@gmail.com