Skip to content
How I gained access to chef, docker, AWS, and MongoDB instances in a single request
samcurry.net | blog | #bug-bounty | #cloud | #cloud-security | #aws | #ssrf | #yahoo | #internal-network
Summary
An SSRF in Yahoo's small business platform exposed an internal config.json and led to access to chef, Docker, AWS and MongoDB instances—via a screenshot-endpoint trick for closed networks.
- Published
- Collected