PWPP
TCM Security Practical Web Pentest Professional (PWPP)
SsrfEnglish
Exam overviewPractice session
A web application fetches a URL specified by the user: `fetch(req.body.url)`. An attacker submits `http://169.254.169.254/latest/meta-data/iam/security-credentials/`. The server returns AWS IAM credentials. What is this attack?
Loading your practice session…