---
id: 6579
title: "How I gained access to chef, docker, AWS, and MongoDB instances in a single request"
source_domain: samcurry.net
source_url: "https://samcurry.net/how-i-gained-access-to-chef-docker-aws-and-mongodb-instances-in-a-single-request"
published_at: "2017-08-03T00:00:00Z"
tags: ["bug-bounty", "cloud", "cloud-security", "aws", "ssrf", "yahoo", "internal-network"]
phying_url: "https://phying.com/item/6579"
lang: en
---

# How I gained access to chef, docker, AWS, and MongoDB instances in a single request

## Summary

An SSRF in Yahoo's small business platform exposed an internal config.json and led to access to chef, Docker, AWS and MongoDB instances—via a screenshot-endpoint trick for closed networks.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2017-08-03T00:00:00Z
- **Original:** https://samcurry.net/how-i-gained-access-to-chef-docker-aws-and-mongodb-instances-in-a-single-request
- **Phying News:** https://phying.com/item/6579