Detecting the hosting platform

[0x48piraj]

For targeted payloads on specific vendors. (AWS, gcloud, ...)

References —

• https://www.coengoedegebure.com/how-i-got-access-to-local-aws-info-via-jira/
• https://medium.com/@Skylinearafat/how-outdated-jira-instances-suffers-from-multiple-security-vulnerabilities-6a88c45e9ec6
• https://blog.detectify.com/2019/01/29/hacking-isnt-an-exact-science/

[0x48piraj]

e9650a7 implements attack for leaking Amazon AWS credentials.

[0x48piraj]

Reference — Abusing the AWS metadata service using SSRF vulnerabilities