All challenges
Multiple ChoiceIntermediate 30s

SSRF: Cloud Metadata

The classic SSRF target to steal cloud IAM credentials on AWS is:
Options
  1. 1http://metadata.google.internal/computeMetadata/keys/project/id
  2. 2http://localhost/admin/internal/dashboard/page/security/settings
  3. 3http://169.254.169.254/latest/meta-data/iam/security-credentials/
  4. 4http://127.0.0.1:22/ssh/banner/agent/version/credentials/token

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle