imds

DCGVR Village·30 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Deconstructing AWS Instance Metadata Service (IMDS) exploitation, abusing SSRF to harvest temporary IAM credentials and escalate cloud permissions.