#aws-imdsv2

FAM CTF : The Cloud writeup

Summary The target exposed a webhook endpoint (/internal/webhook) meant to act as an internal-only proxy, blocking direct requests to private and link-local IP ranges. That blocklist checked resolved