---
title: "Discussion on \"From SSRF to RCE — Extracting AWS Credentials and Achieving Remote Code Execution\" | Hashnode"
description: "Discussion on \"From SSRF to RCE — Extracting AWS Credentials and Achieving Remote Code Execution\". Summary\nDuring testing of an AWS-hosted application, I identified a Server-Side Request Forgery (SSRF) issue in a URL-based feature. The application attempted to fetch user-supplied URLs on the server"
url: "https://hashnode.com/posts/from-ssrf-to-rce-extracting-aws-credentials-and-achieving-remote-code-execution/6a3eca612026ac539218da73"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [From SSRF to RCE — Extracting AWS Credentials and Achieving Remote Code Execution](https://security11.hashnode.dev/from-ssrf-to-rce-extracting-aws-credentials-and-achieving-remote-code-execution?utm_source=hashnode&utm_medium=feed)

Summary During testing of an AWS-hosted application, I identified a Server-Side Request Forgery (SSRF) issue in a URL-based feature. The application attempted to fetch user-supplied URLs on the server

Jun 26 · 5 min read · security11.hashnode.dev  
Read the article

## Written by

[security\_researcher](https://hashnode.com/@securityresearcher1)

@securityresearcher1 · La

  
[View profile](https://hashnode.com/@securityresearcher1)

Security\_researcher

Security\_researcher

## Responses

Markdown supported · ⌘↵ to post

No responses yet.