Cloud on Youssef Elsayyad — Security Researchhttps://elsayyay.github.io/bounty-blog/tags/cloud/Recent content in Cloud on Youssef Elsayyad — Security ResearchHugoen-usMon, 27 Jul 2026 00:00:00 +0000The Screenshot Service That Would Render Anythinghttps://elsayyay.github.io/bounty-blog/posts/screenshot-service-ssrf/Mon, 27 Jul 2026 00:00:00 +0000https://elsayyay.github.io/bounty-blog/posts/screenshot-service-ssrf/A rendering API prepended its own domain to my input, which felt safe. A protocol-relative URL undid that in one line and pointed a headless Chrome instance at anything I wanted, including the cloud metadata service. A common shape for SSRF in any screenshot or render service.