FeedDiscussion
FAM CTF : The Cloud writeup
Summary The target exposed a webhook endpoint (/internal/webhook) meant to act as an internal-only proxy, blocking direct requests to private and link-local IP ranges. That blocklist checked resolved
exploitnotes.hashnode.dev7 min read
#famctf#cloud-ssrf#famctf-2026#aws-imdsv2#ec2-metadata#aws-iam#temporary-credentials#aws-s3#s3-bucket-policy#sigv4#presigned-url#cloud-security#aws-security#web-security#ctf-writeup#aws-penetration-testing#iam-role
Responses
No responses yet.