# Instance Metadata Service (IMDS) Exploitation

> Master IMDS exploitation techniques. Learn to extract cloud credentials via SSRF, understand IMDSv1 vs IMDSv2, and implement robust defenses against metadata attacks.

Canonical: https://codelivly.com/rooms/instance-metadata-service-imds-exploitation
Last updated: 2026-09-25

| | |
|---|---|
| Level | Advanced |
| Category | Cloud Security |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 100 |

This advanced module dives deep into one of the most critical cloud attack vectors: Instance Metadata Service (IMDS) exploitation. You will learn how adversaries leverage Server-Side Request Forgery (SSRF) and misconfigured proxies to steal temporary IAM credentials from EC2 instances and containers. The curriculum covers the architectural differences between IMDSv1 and IMDSv2, practical exploitation techniques, and robust defensive strategies like enforcing session tokens and restricting metadata access to neutralize this pervasive threat.

## Lessons

1. What Is IMDS and Why Does It Matter (30 min)
2. SSRF-to-IMDS: How Credential Theft Happens (30 min)
3. Exploiting IMDSv1 vs IMDSv2 Differences (30 min)
4. Guided Lab: Stealing IAM Credentials via SSRF to IMDS (30 min)

## Related

- [Learning path: Cloud Attack Techniques and Offensive Security](https://codelivly.com/learning-paths/cloud-attack-techniques-and-offensive-security)
- [All rooms](https://codelivly.com/rooms)