Cloud Metadata SSRF Exploiter

Cloud Metadata SSRF Exploiter

Automated SSRF exploitation to extract credentials from cloud metadata services:

• AWS IMDSv1/v2 — Automatic detection and bypass of IMDSv2 token requirement; extracts IAM role credentials, EC2 user-data, and network configuration.
• Azure IMDS — Queries the Azure Instance Metadata Service to obtain OAuth tokens, subscription info, and managed identity credentials.
• GCP Metadata — Extracts service account tokens, project metadata, and custom attributes from the GCP metadata server.
• DigitalOcean/Alibaba — Support for additional cloud providers with their respective metadata endpoints.
• SSRF vector library — Pre-built payloads for common SSRF vectors: URL redirects, DNS rebinding, header injection, and protocol smuggling.