Server Side Request Forgery · passage 49 of 53

SSRF-Cloud-Instances: SSRF URL for Alibaba

1 code block · Server Side Request Forgery/SSRF-Cloud-Instances.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

http://100.100.100.200/latest/meta-data/
http://100.100.100.200/latest/meta-data/instance-id
http://100.100.100.200/latest/meta-data/image-id

Every one of the 53 is a mark on the map. Named now: 27 to 52, reading order first.

SSRF-Advanced-Exploitation: SSRF Advanced Exploitation§ 27text · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: DNS AXFR§ 282 code blocks · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: FastCGI§ 291 code block · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: Memcached§ 301 code block · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: MySQL§ 311 code block · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: Redis§ 321 code block · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: SMTP§ 332 code blocks · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: WSGI§ 341 code block · SSRF-Advanced-Exploitation.md
SSRF-Advanced-Exploitation: Zabbix§ 351 code block · SSRF-Advanced-Exploitation.md
SSRF-Cloud-Instances: SSRF URL for Cloud Instances§ 36text · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for AWS§ 373 code blocks · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for AWS ECS§ 381 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for AWS Elastic Beanstalk§ 392 code blocks · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for AWS Lambda§ 401 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Google Cloud§ 414 code blocks · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: Add an SSH key§ 423 code blocks · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Digital Ocean§ 431 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Packetcloud§ 44text · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Azure§ 452 code blocks · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for OpenStack/RackSpace§ 461 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for HP Helion§ 471 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Oracle Cloud§ 481 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Alibaba§ 491 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Hetzner Cloud§ 501 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Kubernetes ETCD§ 511 code block · SSRF-Cloud-Instances.md
SSRF-Cloud-Instances: SSRF URL for Docker§ 521 code block · SSRF-Cloud-Instances.md

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.