EncryptCodecencryptcodec
Simulations/Zero-Day Exploit Chain

Zero-Day Exploit Chain

Advanced

Chain together an SSRF vulnerability, AWS metadata access, and IAM credential theft to achieve full cloud compromise. Each step builds on the previous, mirroring real-world attack patterns used against major cloud deployments.

Progress:
1
SSRF to Internal Access
2
Metadata to Credentials
3
Credentials to RCE
1
SSRF to Internal Access
This endpoint fetches remote content. Use it to access the AWS instance metadata service.
Vulnerable Endpoint
GET /api/fetch-url?url=[user_input]
The server fetches any URL provided in the "url" parameter and returns the response. No validation is performed on the target URL.
Hint: AWS EC2 instances have an internal metadata service. What IP does it live on?
How to prevent SSRF exploit chains
IMDSv2, SSRF allowlists, and least privilege IAM
▼

Frequently Asked Questions