3 ms·
Not quite relevant to the article: Since it seems to be tricky to properly sanitize URLs for SSRF, I had an idea for safely calling user-defined URLs: Set up
by luhn 8y ago
Not quite relevant to the article: Since it seems to be tricky to properly sanitize URLs for SSRF, I had an idea for safely calling user-defined URLs: Set up an unprivileged non-VPC Lambda function that calls a URL and call all user-defined URLs through the Lambda function. I think it should be bulletproof, anything I'm overlooking?
- bpicolo 8y agoGCP does it by requiring a header on requests to metadata systems. Require a header on your internal services and make sure you never send that header with user-requested URLs and you can guarantee safety there.
- kerng 8y agoStill allows tons of attacks and recon, like port scans, or even crashes of processes- since internal things might not go through the same fuzzing scrutiny as external endpoints.