Product
AWS Instance Metadata Service
- First Reported
- Apr 22, 2026
- Latest Reported
- Apr 22, 2026
Reported Context (1)
- exploit a Server-Side Request Forgery (SSRF) in an EC2-hosted web application to access the AWS Instance Metadata Service and steal IAM credentials. CloudGoat Lab Demonstrates AWS Credential Theft Through EC2 SSRF
MITRE ATT&CK (6)
Vendors (1)
Products (4)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.