Abusing Reverse Proxies, Part 2: Internal Access
Summary
Introduction As seen in Part 1: Abusing Reverse Proxies: Metadata, open proxies can allow an attacker to access cloud metadata API services. However, even without metadata services available, open proxies can be a boon for an attacker. A primer on open proxy types: * Forward: typical use case is allowing private network users to access the internet via a common egress point. This allows an organization to make rules for which types of internet services are accessible to users. * Reverse:
- Published
- Collected
--- id: 9311 title: "Abusing Reverse Proxies, Part 2: Internal Access" source_domain: projectdiscovery.io source_url: "https://projectdiscovery.io/blog/abusing-reverse-proxies-internal-access" published_at: "2022-01-17T08:38:46Z" tags: ["bug-bounty", "cloud"] phying_url: "https://phying.com/item/9311" lang: en --- # Abusing Reverse Proxies, Part 2: Internal Access ## Summary Introduction As seen in Part 1: Abusing Reverse Proxies: Metadata, open proxies can allow an attacker to access cloud metadata API services. However, even without metadata services available, open proxies can be a boon for an attacker. A primer on open proxy types: * Forward: typical use case is allowing private network users to access the internet via a common egress point. This allows an organization to make rules for which types of internet services are accessible to users. * Reverse: ## Intelligence Metadata - **Sources:** projectdiscovery.io - **Published:** 2022-01-17T08:38:46Z - **Original:** https://projectdiscovery.io/blog/abusing-reverse-proxies-internal-access - **Phying News:** https://phying.com/item/9311