The Next Meta

According our offensive security research team, over 100K websites we were found vulnerble to multiple remote code execution (RCE) vulnerbaility, allows us to execute code on thier websites, gaining reverse shell over C2 and sometimes exposed an internal informaiton stored on thier Metadata service.

What is Metadata service?

Metadata is a service provided to any public cloud provider that allows a virtual machine to access data about itself. Some of the information that might leaked could be secrets, encoded string and much more nice L33t!

What we should do next?

In the next engagement, once getting you intial foothold on your customer’s server consider to retrive such information… who knows maybe your next L33t is there : )