Skip to content

Commit 118a786

Browse files
committed
add in ssrf info for end2end test
1 parent 839709e commit 118a786

1 file changed

Lines changed: 6 additions & 5 deletions

File tree

end2end/flask_mysql_test.py

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -98,11 +98,12 @@ def test_direct_imds_ips_are_still_ssrf_ips():
9898
print(attacks[3]["attack"])
9999
assert attacks[3]["attack"]["blocked"] == True
100100
assert attacks[3]["attack"]["kind"] == "ssrf"
101-
assert attacks[3]["attack"]['metadata'] == {}
102-
assert attacks[3]["attack"]["operation"] == 'subprocess.Popen'
103-
assert attacks[3]["attack"]["pathToPayload"] == '.command'
104-
assert attacks[3]["attack"]["payload"] == '"ls -la"'
105-
assert attacks[3]["attack"]["source"] == "route_params"
101+
assert attacks[3]["attack"]['metadata']['hostname'] == '169.254.169.254'
102+
assert attacks[3]["attack"]['metadata']['port'] == '80'
103+
assert attacks[3]["attack"]["operation"] == 'socket.getaddrinfo'
104+
assert attacks[3]["attack"]["pathToPayload"] == '.url'
105+
assert attacks[3]["attack"]["payload"] == '"http://169.254.169.254/metadata/test"'
106+
assert attacks[3]["attack"]["source"] == "body"
106107
assert attacks[3]["attack"]["user"]["id"] == "123"
107108
assert attacks[3]["attack"]["user"]["name"] == "John Doe"
108109

0 commit comments

Comments
 (0)