Callback-url-file-3a-2f-2f-2fhome-2f-2a-2f.aws-2fcredentials

It looks like you are working with a Local File Inclusion (LFI) Server-Side Request Forgery (SSRF) payload designed to exfiltrate AWS credentials. The URL encoded string file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials translates to file:///home/*/.aws/credentials

To understand how this attack works, it is necessary to parse the URL-encoded components of the target keyword:

For further security testing, the ⁠OWASP SSRF Prevention Cheat Sheet provides comprehensive guidance on avoiding this type of vulnerability.