SSRF to Cloud Credentials: Stealing AWS IAM Tokens via Metadata API

Thu May 28 2026

Security Research

How a single Server-Side Request Forgery vulnerability can escalate to full AWS/GCP/Azure account compromise by...