Skip to content

Field notes

Writing

Focused lessons pulled from the work: the kind of thing I wish I'd found when I hit the wall myself.

Jul 11, 2026 The metadata endpoint depends on the compute type An SSRF into an Azure Function returned an empty metadata response, not because the attack failed, but because Functions has no VM IMDS. A short lesson on matching the metadata endpoint to the compute you actually landed on. azuressrfimdsmanaged-identitycloud