Field
Real bug-bounty disclosures and technique breakdowns — distilled from the field.
highSSRF6 min read
Blind SSRF reaching cloud metadata through a PDF renderer
A server-side HTML-to-PDF feature followed redirects to 169.254.169.254 and embedded IAM creds in the output.
an
anon· 6 min readRead writeup