Challenges → Cloud Security

Metadata Harvester

Hard 250 pts 🚩 13 solves ⏱ Avg. time to solve: 32d 17h

Challenge Question

This internal "link preview" tool fetches whatever URL a user gives it and shows a preview, server-side, with no restriction on where it's allowed to reach. Somewhere on that same network segment sits the cloud instance metadata service, which is only supposed to be reachable from the instance itself. See how far the tool's fetching behavior can be pushed.
Access Challenge →

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryCloud Security
  • Authortark
  • AddedJul 4, 2026
  • Avg. Time to Solve32d 17h
  • First Blood🩸 vbianchi

Recent Solvers

  • piyush69 5d ago
  • Max Oct 18, 2026
  • V1XU Oct 4, 2026
  • ajay Oct 2, 2026
  • mmartin Aug 3, 2026
  • kfarooq Jul 27, 2026
  • tark Jul 20, 2026
  • modsentinel Jul 4, 2026
  • azhang Jul 4, 2026
  • apopov Jun 25, 2026
Discuss in the forum →