https://github.com/daenney/ssrf

SSRF protection in Go
https://github.com/daenney/ssrf

Last synced: 3 months ago
JSON representation

SSRF protection in Go

• Host: GitHub
• URL: https://github.com/daenney/ssrf
• Owner: daenney
• License: mit
• Created: 2022-12-01T16:22:38.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2023-07-06T15:57:50.000Z (over 1 year ago)
• Last Synced: 2024-10-09T10:46:52.508Z (3 months ago)
• Language: Go
• Homepage: https://code.dny.dev/ssrf
• Size: 31.3 KB
• Stars: 5
• Watchers: 1
• Forks: 0
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        


🌐 ssrf 🔐



A Go library for implementing SSRF protections



    

	

    

    

    



This package aims to help with implementing SSRF protections. It differs from

other packages in that it is kept automatically in sync with the IANA Special

Purpose Registries for both [IPv4][ipv4] and [IPv6][ipv6] with some additions.

The generation is done by [ssrfgen](cmd/ssrfgen).

A `Safe()` method is provided that you can hook into a `net.Dialer` to prevent

it from ever dialing to endpoints using certain protocols, destination ports

or IPs in certain networks.

Once you have the dialer, you can pass it into things like an `http.Transport`

to create an `http.Client` that won't allow requests to certain destinations.

It's worth pointing out that DNS resolution of the destination will still take

place, so that a name can be translated to an IP first.

## Usage

You can retrieve this package with:

```

go get code.dny.dev/ssrf

```

You can then call the `New()` method to get a Guardian and pass it on to your

`net.Dialer` of choice.

```go

s := ssrf.New()

dialer := &net.Dialer{

	Control: s.Safe,

}

transport := &http.Transport{

	DialContext: dialer.DialContext,

}

client := &http.Client{

	Transport: transport,

}

```

[ipv4]: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml

[ipv6]: https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml