Add SSRF protection#40

Merged

willem-delbare merged 31 commits intomainfrom

Aug 6, 2024

Commits on Aug 1, 2024

Port over imds code
Wout Feys
committed
Add helper function get_port_from_url
Wout Feys
committed
Add the find_hostname_in_userinput function and tests
Wout Feys
committed
Add is_private_ip function with testing included
Wout Feys
committed
move try_parse_url into a helper function
Wout Feys
committed
Add WIP contains_private_ip_address function
Wout Feys
committed

Commits on Aug 2, 2024

Update is_private_ip and testing and rm debug statements
Wout Feys
committed
Add some docstrings to contains_private_Ip_address
Wout Feys
committed
Add check_context_for_ssrf function
Wout Feys
committed
Fix copied over docstring tht was wrong
Wout Feys
committed
Add new http_client sink
Wout Feys
committed

Commits on Aug 5, 2024

Create a new socket sink for dns lookup
Wout Feys
committed
Wrap multiple ops
Wout Feys
committed
Merge branch 'AIK-3256' into AIK-3263
Wout Feys
committed
Add files back in
Wout Feys
committed
Revert "Add files back in"
Wout Feys
committed
Linting
Wout Feys
committed
Create new file with function find_hostname_in_context
Wout Feys
committed
Add aikido ssrf error
Wout Feys
committed
Create an inspect_getaddrinfo_result function
Wout Feys
committed
Call the new inspect function and better logging for socket.py
Wout Feys
committed
Create a /request URL in the mysql app
Wout Feys
committed
Cleanup and add minimal logs
Wout Feys
committed
Bugfix : Get source of context and then send it to function
Wout Feys
committed
Merge branch 'AIK-3263' into AIK-3256
Wout Feys
committed

Commits on Aug 6, 2024

Merge remote-tracking branch 'origin/main' into AIK-3256
Wout Feys
committed
Linting
Wout Feys
committed
Use the right block function
Wout Feys
committed
Add docstring for inspect_getaddrinfo_result module
Wout Feys
committed
Rm comment todo
Wout Feys
committed
Update aikido_firewall/vulnerabilities/ssrf/inspect_getaddrinfo_result.py
willem-delbare
authored