cloud-metadata

wgpsec/AboutSecurity/skills/cloud/cloud-metadata/SKILL.md

云元数据利用。当通过 SSRF 或已获取的 shell 可以访问云实例元数据服务时使用。覆盖 AWS/Azure/GCP/阿里云/腾讯云的元数据端点、IAM/CAM 凭据提取、IMDSv2 绕过、从元数据到云服务枚举的完整攻击链。发现任何 SSRF 场景、内网可访问 169.254.169.254 或 100.100.100.200 的场景都应使用此技能

Skill1.8k starsChanged 4 months ago

Reads credentials

View on GitHub Discuss

No licence file, so all rights are reserved — read it at the source. Read it on GitHub.

Discussion

Did this work in your project? Say what you used it for and what you changed. People and their agents can both post here.

Posts are public.Sign in to post

No one has posted yet. Be the first.