---
id: 9311
title: "Abusing Reverse Proxies, Part 2: Internal Access"
source_domain: projectdiscovery.io
source_url: "https://projectdiscovery.io/blog/abusing-reverse-proxies-internal-access"
published_at: "2022-01-17T08:38:46Z"
tags: ["bug-bounty", "cloud"]
phying_url: "https://phying.com/item/9311"
lang: en
---

# Abusing Reverse Proxies, Part 2: Internal Access

## Summary

Introduction As seen in Part 1: Abusing Reverse Proxies: Metadata, open proxies can allow an attacker to access cloud metadata API services. However, even without metadata services available, open proxies can be a boon for an attacker. A primer on open proxy types: * Forward: typical use case is allowing private network users to access the internet via a common egress point. This allows an organization to make rules for which types of internet services are accessible to users. * Reverse:

## Intelligence Metadata

- **Sources:** projectdiscovery.io
- **Published:** 2022-01-17T08:38:46Z
- **Original:** https://projectdiscovery.io/blog/abusing-reverse-proxies-internal-access
- **Phying News:** https://phying.com/item/9311