When u see this - Server Side Request Forgery to an internal service - $500 & Remote Code Execution (RCE) - $5000 then read - "Do not attempt post exploitation of a security issue you discover for any reason" - Err SSRF can lead to RCE a lot of the time, but here is your $500