Daily Hack
A fresh 60-second challenge every day. Solve it, earn XP, and keep your streak alive.
Daily Hack #49
SSRF the cloud metadata
This image proxy fetches whatever URL you hand it and returns the body - with no allow-list of where it may go. It runs on a cloud server that exposes an internal metadata service at 169.254.169.254. Point the proxy at that service's IAM credentials path, send it, and read the name of the IAM role it leaks.
Play freely - sign up to submit your answer and earn XP.
Solved!
+10 XP
First blood! You were first to crack today's hack.
How it works