Lambda's environment variables hold IAM credentials that attackers can target via file read and SSRF vulnerabilities. They can also extract event data using SSRF exploits. This blog explores practical techniques for exploiting these vulnerabilities in Lambda functions.
buff.lySteal IAM Credentials and Event Data from Lambda - Hacking The CloudLeverage file read and SSRF vulnerabilities to steam IAM credentials and event data from Lambda.
0 reposts0 likes