Who Needs VPN?? SSRF Already inside

A bug bounty story about quiet nights, one suspicious parameter, and an unauthenticated path straight into example.com’s internal network.