{"title":"An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata ! \u304b\u3089\u5b66\u3076","provider_name":"Hatena Blog","blog_url":"https://u3nerd.hatenablog.com/","author_name":"U3nerd","width":"100%","url":"https://u3nerd.hatenablog.com/entry/2023/12/19/111543","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/U/U3nerd/20231219/20231219110020.png","blog_title":"The light of hope to the other side of the tunnel - Kotsu Kotsu To -","type":"rich","description":"\u30bd\u30fc\u30b9\uff1a medium.com \u8106\u5f31\u6027\uff1aSSRF \u8a33\uff1a ssrf\u3068\u306f\u4f55\u3067\u3059\u304b\uff1f \u307b\u3068\u3093\u3069\u306e\u8aad\u8005\u306f ssrf \u3068\u306f\u4f55\u304b\u3092\u77e5\u3063\u3066\u3044\u308b\u3068\u601d\u3044\u307e\u3059\u304c\u3001\u7c21\u5358\u306b\u8aac\u660e\u3059\u308b\u305f\u3081\u306b\u3001portswigger \u3092\u898b\u3066\u307f\u307e\u3057\u3087\u3046\u3002 \u30b5\u30fc\u30d0\u30fc\u5074\u30ea\u30af\u30a8\u30b9\u30c8 \u30d5\u30a9\u30fc\u30b8\u30a7\u30ea (SSRF \u3068\u3082\u547c\u3070\u308c\u308b) \u306f Web \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d0\u30fc\u5074\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u3001\u653b\u6483\u8005\u304c\u9078\u629e\u3057\u305f\u4efb\u610f\u306e\u30c9\u30e1\u30a4\u30f3\u3078\u306e HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5b9f\u884c\u3055\u305b\u308b\u3053\u3068\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002 \u79c1\u306f\u30d7\u30ed\u30b0\u30e9\u30e0\u306b\u53d6\u308a\u7d44\u3093\u3067\u3044\u307e\u3057\u305f\u304c\u3001\u30bf\u30fc\u30b2\u30c3\u30c8\u306e\u540d\u524d\u3092\u516c\u958b\u3059\u308b\u6a29\u9650\u304c\u306a\u3044\u306e\u3067\u3001\u305d\u308c\u3092 redacted.com \u3068\u547c\u3073\u307e\u3057\u3087\u3046\u3002 \u3053\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5c11\u3057\u3044\u3058\u3063\u305f\u2026","height":"190","provider_url":"https://hatena.blog","author_url":"https://blog.hatena.ne.jp/U3nerd/","categories":["Bug Report"],"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fu3nerd.hatenablog.com%2Fentry%2F2023%2F12%2F19%2F111543\" title=\"An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata ! \u304b\u3089\u5b66\u3076 - The light of hope to the other side of the tunnel - Kotsu Kotsu To -\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","published":"2023-12-19 11:15:43"}