tree f1e3490c5c9db6f7bc73c1af485d62b1b1c05c5f
parent c2e89013c38476d1f10b73531f46805d60f00f80
author Norbert Schneider <norbert.schneider@code-intelligence.com> 1682674940 +0200
committer GitHub <noreply@github.com> 1682674940 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJkS5T8CRBK7hj4Ov3rIwAAHkAIAJCagurC3FtapZvn/ccyiVzL
 Gmsi/dHUSmH8EMYRGPn15yFutsOqUF4ltjzePokLbvsjApCyCp/CQKOtczejoVDr
 2fkISsa4mgIxydNh7EUrJDteUiJEAq6FN4DrXrhKXuXpFnbjtZeIxpt8c5bcm5L5
 Q2nb1G+HAN+u9SJiA/vQjC6gsXclrZeWkljyzbqnZm0CfqYc+CqojbgggvLbkehb
 3aYi4UmJ/QF6NV3D5Jy3AyK38czAjeTpK0Pz+FGaw2sCcdjCRLXyzIUEOn3JfqmI
 cy8fxCp6r4vYV3PTghOphzUyR20OZXLEnPTcjCi6AG/wj1E1u1yW0ihUzKNfvvA=
 =hu0o
 -----END PGP SIGNATURE-----
 

Add SSRF detector (#643)

Server Side Request Forgery (SSRF) attacks occur when requests to
destinations based on untrusted data are executed. This could lead to
exfiltration of sensitive data or exposure of internal services.

By default, all network connections are reported as a medium severity 
security issues. The new `BugDetectors#allowNetworkConnections`
method provides the means to configure this on per-fuzz test basis, or,
using try-with-resources, on a per-scope basis.

Checks are implemented via `java.net.Socket.connect` and
`java.nio.channels.SocketChannel.connect` methods.

Co-authored-by: psy <patrice.salathe@code-intelligence.com>
Co-authored-by: Fabian Meumertzheim <meumertzheim@code-intelligence.com>