feat: rag-embedding-ai-chat (#1)
Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: https://gitea.meghsakha.com/sharang/compliance-scanner-agent/pulls/1
This commit was merged in pull request #1.
This commit is contained in:
@@ -20,10 +20,7 @@ impl SsrfAgent {
|
||||
("http://[::1]", "localhost IPv6"),
|
||||
("http://0.0.0.0", "zero address"),
|
||||
("http://169.254.169.254/latest/meta-data/", "AWS metadata"),
|
||||
(
|
||||
"http://metadata.google.internal/",
|
||||
"GCP metadata",
|
||||
),
|
||||
("http://metadata.google.internal/", "GCP metadata"),
|
||||
("http://127.0.0.1:22", "SSH port probe"),
|
||||
("http://127.0.0.1:3306", "MySQL port probe"),
|
||||
("http://localhost/admin", "localhost admin"),
|
||||
@@ -91,10 +88,7 @@ impl DastAgent for SsrfAgent {
|
||||
.post(&endpoint.url)
|
||||
.form(&[(param.name.as_str(), payload)])
|
||||
} else {
|
||||
let test_url = format!(
|
||||
"{}?{}={}",
|
||||
endpoint.url, param.name, payload
|
||||
);
|
||||
let test_url = format!("{}?{}={}", endpoint.url, param.name, payload);
|
||||
self.http.get(&test_url)
|
||||
};
|
||||
|
||||
@@ -133,10 +127,7 @@ impl DastAgent for SsrfAgent {
|
||||
String::new(),
|
||||
target_id.clone(),
|
||||
DastVulnType::Ssrf,
|
||||
format!(
|
||||
"SSRF ({technique}) via parameter '{}'",
|
||||
param.name
|
||||
),
|
||||
format!("SSRF ({technique}) via parameter '{}'", param.name),
|
||||
format!(
|
||||
"Server-side request forgery detected in parameter '{}' at {}. \
|
||||
The application made a request to an internal resource ({}).",
|
||||
|
||||
Reference in New Issue
Block a user