File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -98,11 +98,12 @@ def test_direct_imds_ips_are_still_ssrf_ips():
9898 print (attacks [3 ]["attack" ])
9999 assert attacks [3 ]["attack" ]["blocked" ] == True
100100 assert attacks [3 ]["attack" ]["kind" ] == "ssrf"
101- assert attacks [3 ]["attack" ]['metadata' ] == {}
102- assert attacks [3 ]["attack" ]["operation" ] == 'subprocess.Popen'
103- assert attacks [3 ]["attack" ]["pathToPayload" ] == '.command'
104- assert attacks [3 ]["attack" ]["payload" ] == '"ls -la"'
105- assert attacks [3 ]["attack" ]["source" ] == "route_params"
101+ assert attacks [3 ]["attack" ]['metadata' ]['hostname' ] == '169.254.169.254'
102+ assert attacks [3 ]["attack" ]['metadata' ]['port' ] == '80'
103+ assert attacks [3 ]["attack" ]["operation" ] == 'socket.getaddrinfo'
104+ assert attacks [3 ]["attack" ]["pathToPayload" ] == '.url'
105+ assert attacks [3 ]["attack" ]["payload" ] == '"http://169.254.169.254/metadata/test"'
106+ assert attacks [3 ]["attack" ]["source" ] == "body"
106107 assert attacks [3 ]["attack" ]["user" ]["id" ] == "123"
107108 assert attacks [3 ]["attack" ]["user" ]["name" ] == "John Doe"
108109
You can’t perform that action at this time.
0 commit comments