Class: Aikido::Zen::Attacks::SSRFAttack

Inherits:
Aikido::Zen::Attack show all
Defined in:
lib/aikido/zen/attack.rb

Instance Attribute Summary collapse

Attributes inherited from Aikido::Zen::Attack

#context, #operation, #sink

Instance Method Summary collapse

Methods inherited from Aikido::Zen::Attack

#as_json, #blocked?, #will_be_blocked!

Constructor Details

#initialize(request:, input:, **opts) ⇒ SSRFAttack

Returns a new instance of SSRFAttack.



157
158
159
160
161
 
# File 'lib/aikido/zen/attack.rb', line 157

def initialize(request:, input:, **opts)
  super(**opts)
  @input = input
  @request = request
end

Instance Attribute Details

#input ⇒ Object (readonly)

Returns the value of attribute input.



154
155
156
 
# File 'lib/aikido/zen/attack.rb', line 154

def input
  @input
end

#request ⇒ Object (readonly)

Returns the value of attribute request.



155
156
157
 
# File 'lib/aikido/zen/attack.rb', line 155

def request
  @request
end

Instance Method Details

#exception ⇒ Object 



171
172
173
 
# File 'lib/aikido/zen/attack.rb', line 171

def exception(*)
  SSRFDetectedError.new(self)
end

#humanized_name ⇒ Object 



163
164
165
 
# File 'lib/aikido/zen/attack.rb', line 163

def humanized_name
  "server-side request forgery"
end

#kind ⇒ Object 



167
168
169
 
# File 'lib/aikido/zen/attack.rb', line 167

def kind
  "ssrf"
end

#metadata ⇒ Object 



175
176
177
178
179
180
 
# File 'lib/aikido/zen/attack.rb', line 175

def metadata
  {
    hostname: @request.uri.hostname,
    port: @request.uri.port.to_s
  }
end