akto-api-security / akto

Proactive, Open source API security β†’ API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
https://www.akto.io/
MIT License
1.06k stars 197 forks source link

⛏️ Write test for executing port scanning via SSRF #134

Closed aktoboy closed 1 year ago

aktoboy commented 1 year ago

πŸ’­ Introduction: We want to test whether api's which take in url as a param are vulnerable to port scanning attack using SSRF. You can refer this blog for more details about the attack.

🎯 Requirements: This test should only run for APIs which are taking url as a parameter in input. The test should correctly detect whether the port scanning vulnerability can be exploited.

βœ… Task summary:

✌🏻 Hints: You can build the yaml template by referring this link You can refer the PR here for changes to be done in akto repo: link

πŸ™‹πŸΌβ€β™‚οΈ Questions: If you have questions, need any help, or just want to hang out, make sure to join us on our Discord server.

ankush-jain-akto commented 1 year ago

This is implemented already. Closing this issue.