Unverified50% confidenceFactExact time
In traditional web applications, typical SSRF exploitation methods include accessing the AWS EC2 metadata service address 169.254.169.254 to steal temporary credentials for cloud instances.
1
Sources
50%
Confidence
Long-term
Relevance
10/10/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe most dangerous target of SSRF (Server-Side Request Forgery) in cloud environments is the IMDS instance metadata service, with AWS's IMDS address being 169.254.169.254.73% similarUnverifiedAWS Secrets Manager 支持自动轮换 RDS 数据库密码67% similarUnverifiedSSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.66% similarUnverifiedAWS SDK 凭证链按优先级依次检查环境变量、~/.aws/credentials 文件、AWS Config 文件、Container credentials、EC2 IMDSv2，最后是 IAM Identity Center61% similarUnverifiedSSRF利用中常被检测的危险协议包括file://（读取本地文件）、dict://（探测端口开放状态）、ftp://（有时可绕过过滤）61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/993311API
curl https://kongchang.com/api/v1/knowledge/claims/993311MCP
get_claim(id=993311)