The HTTP 303 SSRF Hack : From Python HTTP Client Defaults to AWS Credential Exfiltration. A Deep Dive Into Escalating a Blind SSRF to Full ReadA POST to IMDS may fail — but a redirect can quietly turn it into something else.This writeup documents the chain from a URL typed field inside a service account credential JSON to live AWS IAM credentials...