ssrf-lab 0.0.0-stage → 0.1.0

package/dist/adapters/vercelGuardedFetch.js

@@ -0,0 +1,65 @@
+import { redact } from './internal.js';
+import { loadOptional } from './optional.js';
+import { PolicyRefusal } from './types.js';
+const REFUSALS = {
+    hostname_unsafe: 'forbidden-address',
+    host_not_allowed: 'forbidden-address',
+    redirect_to_unsafe_host: 'forbidden-address',
+    protocol_not_allowed: 'scheme-not-allowed',
+    too_many_redirects: 'too-many-redirects',
+    response_too_large: 'body-too-large',
+    timeout: 'deadline',
+};
+/**
+ * Use the package's real dispatcher and exported bounded body reader.
+ *
+ * The package is loaded on the first request, so ssrf-lab runs without it.
+ */
+export const vercelGuardedFetch = {
+    name: 'guarded-fetch 0.1.5 (guardedFetch + readBodyAsText)',
+    // The package has its own guarded lookup, but no injectable base resolver.
+    supportsConnectHook: false,
+    supportsLoopbackOrigin: false,
+    async fetch(url, options = {}) {
+        const { createGuardedDispatcher, guardedFetch: upstreamFetch, GuardedFetchError: UpstreamError, readBodyAsText, } = await loadOptional('guarded-fetch', () => import('guarded-fetch'));
+        const timeoutMs = options.timeoutMs ?? 5000;
+        const deadlineAt = Date.now() + timeoutMs;
+        const dispatcher = createGuardedDispatcher();
+        try {
+            const response = await upstreamFetch(url, { timeoutMs, dispatcher, opaqueErrors: true });
+            let bytesRead = 0;
+            // Count wire-decoded bytes without supplying a replacement security control.
+            const measuredBody = response.body?.pipeThrough(new TransformStream({
+                transform(chunk, controller) {
+                    bytesRead += chunk.byteLength;
+                    controller.enqueue(chunk);
+                },
+            })) ?? null;
+            const measured = new Response(measuredBody, { status: response.status, headers: response.headers });
+            const body = await readBodyAsText(measured, {
+                maxResponseBytes: options.maxBytes ?? 1024 * 1024,
+                deadlineAt,
+                opaqueErrors: true,
+            });
+            return {
+                status: response.status,
+                bytesRead,
+                bodySample: body.slice(0, 4096),
+                hops: [redact(new URL(url)), ...(response.url && response.url !== url ? [redact(new URL(response.url))] : [])],
+                stoppedByHarness: false,
+            };
+        }
+        catch (error) {
+            if (error instanceof UpstreamError) {
+                const reason = REFUSALS[error.code];
+                if (reason !== undefined)
+                    throw new PolicyRefusal(reason, `guarded-fetch: ${error.code}`);
+            }
+            throw error;
+        }
+        finally {
+            await dispatcher.destroy();
+        }
+    },
+};
+//# sourceMappingURL=vercelGuardedFetch.js.map

package/dist/adapters/vercelGuardedFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercelGuardedFetch.js","sourceRoot":"","sources":["../../src/adapters/vercelGuardedFetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAuC,MAAM,YAAY,CAAA;AAE/E,MAAM,QAAQ,GAA8D;IAC1E,eAAe,EAAE,mBAAmB;IACpC,gBAAgB,EAAE,mBAAmB;IACrC,uBAAuB,EAAE,mBAAmB;IAC5C,oBAAoB,EAAE,oBAAoB;IAC1C,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,gBAAgB;IACpC,OAAO,EAAE,UAAU;CACpB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC5C,IAAI,EAAE,qDAAqD;IAC3D,2EAA2E;IAC3E,mBAAmB,EAAE,KAAK;IAC1B,sBAAsB,EAAE,KAAK;IAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,EAAE;QAC3B,MAAM,EACJ,uBAAuB,EACvB,YAAY,EAAE,aAAa,EAC3B,iBAAiB,EAAE,aAAa,EAChC,cAAc,GACf,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACzC,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAA;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;YACxF,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,6EAA6E;YAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,eAAe,CAAyB;gBAC1F,SAAS,CAAC,KAAK,EAAE,UAAU;oBACzB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAA;oBAC7B,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC3B,CAAC;aACF,CAAC,CAAC,IAAI,IAAI,CAAA;YACX,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YACnG,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE;gBAC1C,gBAAgB,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,GAAG,IAAI;gBACjD,UAAU;gBACV,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;YACF,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBAC/B,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9G,gBAAgB,EAAE,KAAK;aACxB,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,UAAU,CAAC,OAAO,EAAE,CAAA;QAC5B,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/checker/probes.d.ts

@@ -0,0 +1,34 @@
+import type { ClientOptions, FetchOutcome } from '../adapters/types.js';
+import { type AttackRange } from '../range/server.js';
+export interface Probe {
+    readonly id: string;
+    readonly title: string;
+    /** What the range does. */
+    readonly attack: string;
+    /** What a client must do about it. */
+    readonly control: string;
+    readonly start: (range: AttackRange) => string;
+    readonly options?: (range: AttackRange) => ClientOptions;
+    /** True when the outcome shows the client went where it should not have. */
+    readonly reached: (outcome: FetchOutcome) => boolean;
+    /**
+     * True when the probe targets the internal service, so the checker can
+     * MEASURE whether the attack arrived instead of reading it from an error.
+     */
+    readonly internalTarget?: boolean;
+    /**
+     * True when an ordinary error is in fact the client's own limit.
+     * The argument is the error and its causes, flattened into 1 line.
+     */
+    readonly recognizes?: (detail: string) => boolean;
+    readonly needsConnectHook?: boolean;
+}
+/**
+ * Address spellings that can reach the local internal service.
+ *
+ * Several normalize to 127.0.0.1; 0.0.0.0 is an unspecified address and
+ * IPv4-mapped IPv6 uses a different address family. These probes need no
+ * redirect, so they also test guards applied at the first hop.
+ */
+export declare const DIRECT_PROBES: readonly Probe[];
+export declare const PROBES: readonly Probe[];

package/dist/checker/probes.js

@@ -0,0 +1,124 @@
+import { BOMB_EXPANDED_BYTES } from '../range/bomb.js';
+import { CANARY_INTERNAL_SECRET } from '../range/canaries.js';
+import { INTERNAL_PATH, RANGE_PATHS } from '../range/server.js';
+import { flipLookup } from '../util/flipLookup.js';
+const gotSecret = (outcome) => outcome.bodySample.includes(CANARY_INTERNAL_SECRET);
+/**
+ * Address spellings that can reach the local internal service.
+ *
+ * Several normalize to 127.0.0.1; 0.0.0.0 is an unspecified address and
+ * IPv4-mapped IPv6 uses a different address family. These probes need no
+ * redirect, so they also test guards applied at the first hop.
+ */
+export const DIRECT_PROBES = [
+    directProbe('direct-dotted', 'Plain 127.0.0.1', (port) => `http://127.0.0.1:${port}`),
+    directProbe('direct-decimal', 'Decimal 2130706433', (port) => `http://2130706433:${port}`),
+    directProbe('direct-octal', 'Octal 0177.0.0.1', (port) => `http://0177.0.0.1:${port}`),
+    directProbe('direct-hex', 'Hexadecimal 0x7f.0.0.1', (port) => `http://0x7f.0.0.1:${port}`),
+    directProbe('direct-zero-host', 'The unspecified address 0.0.0.0', (port) => `http://0.0.0.0:${port}`),
+    directProbe('direct-ipv6-mapped', 'IPv4-mapped IPv6 [::ffff:127.0.0.1]', (port) => `http://[::ffff:127.0.0.1]:${port}`),
+    directProbe('direct-credentials', 'Credentials in front of the host', (port) => `http://lab:s3cr3t@127.0.0.1:${port}`),
+];
+function directProbe(id, title, origin) {
+    return {
+        id,
+        title,
+        attack: 'one request straight at the internal service',
+        control: 'Classify the parsed address, whatever spelling reached the parser.',
+        start: (range) => `${origin(range.internalPort)}${INTERNAL_PATH}`,
+        internalTarget: true,
+        reached: gotSecret,
+    };
+}
+export const PROBES = [
+    {
+        id: 'redirect-loopback',
+        title: 'Redirect into loopback',
+        attack: '302 to http://127.0.0.1:<range>/internal/secret',
+        control: 'Judge every hop, not only the first URL.',
+        start: (range) => range.url(RANGE_PATHS.redirectLoopback),
+        internalTarget: true,
+        reached: gotSecret,
+    },
+    {
+        id: 'redirect-decimal-loopback',
+        title: 'Redirect into loopback, written as a decimal',
+        attack: '302 to http://2130706433:<range>/internal/secret',
+        control: 'Classify the parsed host, never the raw string.',
+        start: (range) => range.url(RANGE_PATHS.redirectDecimalLoopback),
+        internalTarget: true,
+        reached: gotSecret,
+    },
+    {
+        id: 'redirect-credentials',
+        title: 'Redirect that carries credentials',
+        attack: '302 to http://lab:s3cr3t@127.0.0.1:<range>/internal/secret',
+        control: 'Refuse the address, and never echo the credentials.',
+        start: (range) => range.url(RANGE_PATHS.redirectCredentials),
+        internalTarget: true,
+        reached: gotSecret,
+    },
+    {
+        id: 'redirect-link-local',
+        title: 'Redirect into cloud metadata',
+        attack: '302 to http://169.254.169.254/latest/meta-data/',
+        control: 'Refuse link-local addresses.',
+        start: (range) => range.url(RANGE_PATHS.redirectLinkLocal),
+        reached: (outcome) => outcome.status > 0,
+    },
+    {
+        // Keep the ID stable for consumers of existing JSON reports.
+        id: 'redirect-private',
+        title: 'Redirect into TEST-NET-2 (reserved)',
+        attack: '302 to http://198.51.100.1/',
+        control: 'Refuse reserved documentation addresses; this is not an RFC 1918 probe.',
+        start: (range) => range.url(RANGE_PATHS.redirectPrivate),
+        reached: (outcome) => outcome.status > 0,
+    },
+    {
+        id: 'redirect-loop',
+        title: 'Endless redirect chain',
+        attack: '302 to itself, for ever',
+        control: 'Cap the number of hops.',
+        start: (range) => range.url(RANGE_PATHS.redirectLoop),
+        reached: (outcome) => outcome.status > 0 && outcome.hops.length > 10,
+        recognizes: (detail) => /redirect/i.test(detail),
+    },
+    {
+        id: 'decompression-bomb',
+        title: 'Decompression bomb',
+        attack: 'about 64 KiB on the wire, 64 MiB once expanded',
+        control: 'Count bytes AFTER decompression, while reading.',
+        start: (range) => range.url(RANGE_PATHS.payloadBomb),
+        reached: (outcome) => outcome.bytesRead >= BOMB_EXPANDED_BYTES / 2,
+    },
+    {
+        id: 'endless-body',
+        title: 'Body with no end and no length',
+        attack: 'chunked response that never finishes',
+        control: 'Cap received bytes with a running total.',
+        start: (range) => range.url(RANGE_PATHS.payloadEndless),
+        reached: (outcome) => outcome.bytesRead > 1024 * 1024 || outcome.stoppedByHarness,
+    },
+    {
+        id: 'slow-drip',
+        title: 'One byte per second',
+        attack: 'a response that stays open for hours',
+        control: 'Bound the whole request with a deadline.',
+        start: (range) => range.url(RANGE_PATHS.payloadSlow),
+        options: () => ({ timeoutMs: 4000 }),
+        reached: (outcome) => outcome.stoppedByHarness || outcome.status === 200,
+    },
+    {
+        id: 'dns-rebind',
+        title: 'DNS rebinding (simulated)',
+        attack: 'first answer 93.184.216.34, every later answer 127.0.0.1',
+        control: 'Judge the address the SOCKET uses, not an earlier answer.',
+        needsConnectHook: true,
+        internalTarget: true,
+        start: (range) => `http://rebind.test:${range.internalPort}${INTERNAL_PATH}`,
+        options: () => ({ lookup: flipLookup(['93.184.216.34', '127.0.0.1']) }),
+        reached: gotSecret,
+    },
+];
+//# sourceMappingURL=probes.js.map

package/dist/checker/probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.js","sourceRoot":"","sources":["../../src/checker/probes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAoB,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AA0BlD,MAAM,SAAS,GAAG,CAAC,OAAqB,EAAW,EAAE,CACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,WAAW,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC;IACrF,WAAW,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC1F,WAAW,CAAC,cAAc,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACtF,WAAW,CAAC,YAAY,EAAE,wBAAwB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC1F,WAAW,CACT,kBAAkB,EAClB,iCAAiC,EACjC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,IAAI,EAAE,CACnC;IACD,WAAW,CACT,oBAAoB,EACpB,qCAAqC,EACrC,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,IAAI,EAAE,CAC9C;IACD,WAAW,CACT,oBAAoB,EACpB,kCAAkC,EAClC,CAAC,IAAI,EAAE,EAAE,CAAC,+BAA+B,IAAI,EAAE,CAChD;CACF,CAAA;AAED,SAAS,WAAW,CAClB,EAAU,EACV,KAAa,EACb,MAAgC;IAEhC,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM,EAAE,8CAA8C;QACtD,OAAO,EAAE,oEAAoE;QAC7E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,aAAa,EAAE;QACjE,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,SAAS;KACnB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,iDAAiD;QACzD,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC;QACzD,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,SAAS;KACnB;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE,8CAA8C;QACrD,MAAM,EAAE,kDAAkD;QAC1D,OAAO,EAAE,iDAAiD;QAC1D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,uBAAuB,CAAC;QAChE,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,SAAS;KACnB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE,mCAAmC;QAC1C,MAAM,EAAE,4DAA4D;QACpE,OAAO,EAAE,qDAAqD;QAC9D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC;QAC5D,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,SAAS;KACnB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,iDAAiD;QACzD,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAC1D,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;KACzC;IACD;QACE,6DAA6D;QAC7D,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,qCAAqC;QAC5C,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,yEAAyE;QAClF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC;QACxD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;KACzC;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC;QACrD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;QACpE,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;KACjD;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,gDAAgD;QACxD,OAAO,EAAE,iDAAiD;QAC1D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC;QACpD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,mBAAmB,GAAG,CAAC;KACnE;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,gCAAgC;QACvC,MAAM,EAAE,sCAAsC;QAC9C,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC;QACvD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,IAAI,OAAO,CAAC,gBAAgB;KAClF;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,sCAAsC;QAC9C,OAAO,EAAE,0CAA0C;QACnD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;KACzE;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,2BAA2B;QAClC,MAAM,EAAE,0DAA0D;QAClE,OAAO,EAAE,2DAA2D;QACpE,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,KAAK,CAAC,YAAY,GAAG,aAAa,EAAE;QAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,SAAS;KACnB;CACF,CAAA"}

package/dist/checker/report.d.ts

@@ -0,0 +1,5 @@
+import type { ScanResult } from './run.js';
+export declare const LEGEND: string;
+/** Render 1 scan as a table for a terminal. */
+export declare function renderTable(scan: ScanResult): string;
+export declare function renderJson(scans: readonly ScanResult[]): string;

package/dist/checker/report.js

@@ -0,0 +1,26 @@
+const MARKS = {
+    BLOCKED: '[+] BLOCKED  ',
+    PREVENTED: '[=] PREVENTED',
+    REACHED: '[!] REACHED  ',
+    LUCKY: '[~] LUCKY    ',
+    'NOT-APPLICABLE': '[-] N/A      ',
+};
+export const LEGEND = [
+    '[+] BLOCKED    the client refused, and named the control that refused',
+    '[=] PREVENTED  the attack never arrived, but the client named no control',
+    '[!] REACHED    the client arrived, or never stopped reading',
+    '[~] LUCKY      nothing refused it; something else failed first',
+    '[-] N/A        the client has no hook this probe can use',
+].join('\n');
+/** Render 1 scan as a table for a terminal. */
+export function renderTable(scan) {
+    const titleWidth = Math.max(...scan.results.map((row) => row.title.length));
+    const lines = scan.results.map((row) => `  ${MARKS[row.verdict]}  ${row.title.padEnd(titleWidth)}  ${row.note}`);
+    const summary = `  ${scan.blocked} blocked · ${scan.prevented} prevented · ${scan.reached} reached · ` +
+        `${scan.lucky} lucky · ${scan.notApplicable} not applicable`;
+    return [`\n${scan.client}`, '-'.repeat(scan.client.length), ...lines, '', summary].join('\n');
+}
+export function renderJson(scans) {
+    return JSON.stringify({ scans }, null, 2);
+}
+//# sourceMappingURL=report.js.map

package/dist/checker/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/checker/report.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAA4B;IACrC,OAAO,EAAE,eAAe;IACxB,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,eAAe;IACxB,KAAK,EAAE,eAAe;IACtB,gBAAgB,EAAE,eAAe;CAClC,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,uEAAuE;IACvE,0EAA0E;IAC1E,6DAA6D;IAC7D,gEAAgE;IAChE,0DAA0D;CAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAC5B,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CACjF,CAAA;IAED,MAAM,OAAO,GACX,KAAK,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC,OAAO,aAAa;QACtF,GAAG,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,aAAa,iBAAiB,CAAA;IAE9D,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC/F,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA4B;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC3C,CAAC"}

package/dist/checker/run.d.ts

@@ -0,0 +1,27 @@
+import { type HttpClient } from '../adapters/types.js';
+import type { AttackRange } from '../range/server.js';
+import { type Probe } from './probes.js';
+/**
+ * What one probe learned about one client.
+ *
+ * `LUCKY` is the verdict that this whole tool exists for. The request failed,
+ * the client has no control, and the difference is invisible in a log.
+ */
+export type Verdict = 'BLOCKED' | 'PREVENTED' | 'REACHED' | 'LUCKY' | 'NOT-APPLICABLE';
+export interface ProbeResult {
+    readonly probeId: string;
+    readonly title: string;
+    readonly verdict: Verdict;
+    readonly note: string;
+    readonly durationMs: number;
+}
+export interface ScanResult {
+    readonly client: string;
+    readonly results: readonly ProbeResult[];
+    readonly blocked: number;
+    readonly prevented: number;
+    readonly reached: number;
+    readonly lucky: number;
+    readonly notApplicable: number;
+}
+export declare function runScan(client: HttpClient, range: AttackRange, probes?: readonly Probe[]): Promise<ScanResult>;

package/dist/checker/run.js

@@ -0,0 +1,108 @@
+import { MissingOptionalPackage } from '../adapters/optional.js';
+import { PolicyRefusal } from '../adapters/types.js';
+import { PROBES } from './probes.js';
+export async function runScan(client, range, probes = PROBES) {
+    const results = [];
+    for (const probe of probes) {
+        results.push(await runProbe(client, range, probe));
+    }
+    const count = (verdict) => results.filter((row) => row.verdict === verdict).length;
+    return {
+        client: client.name,
+        results,
+        blocked: count('BLOCKED'),
+        prevented: count('PREVENTED'),
+        reached: count('REACHED'),
+        lucky: count('LUCKY'),
+        notApplicable: count('NOT-APPLICABLE'),
+    };
+}
+async function runProbe(client, range, probe) {
+    const started = Date.now();
+    const hitsBefore = range.internalHits();
+    const hitInternal = () => probe.internalTarget === true && range.internalHits() > hitsBefore;
+    const missed = () => probe.internalTarget === true && range.internalHits() === hitsBefore;
+    const finish = (verdict, note) => ({
+        probeId: probe.id,
+        title: probe.title,
+        verdict,
+        note,
+        durationMs: Date.now() - started,
+    });
+    if (probe.needsConnectHook === true && !client.supportsConnectHook) {
+        return finish('NOT-APPLICABLE', 'the client exposes no hook on the address it connects to');
+    }
+    if (client.supportsLoopbackOrigin === false &&
+        new URL(range.origin).hostname === '127.0.0.1' &&
+        new URL(probe.start(range)).origin === range.origin) {
+        return finish('NOT-APPLICABLE', 'requires the isolated public-address entry server; loopback would be refused before the probe');
+    }
+    try {
+        // The range itself lives on loopback. Without this the guards refuse the
+        // entry URL and every probe passes while testing nothing.
+        const outcome = await client.fetch(probe.start(range), {
+            trustedOrigin: range.origin,
+            ...(probe.options?.(range) ?? {}),
+        });
+        // SSRF has already happened if the internal service saw the request,
+        // even when an adapter drops the body or omits the canary from its result.
+        if (hitInternal()) {
+            return finish('REACHED', 'the internal service recorded a request, independent of the returned body');
+        }
+        if (probe.reached(outcome)) {
+            return finish('REACHED', describeReach(outcome.status, outcome.bytesRead, outcome.stoppedByHarness));
+        }
+        if (missed()) {
+            return finish('PREVENTED', 'no refusal, and the internal service saw no request');
+        }
+        return finish('LUCKY', `no refusal; status ${outcome.status}, ${outcome.bytesRead} bytes`);
+    }
+    catch (error) {
+        // A client whose package is not installed never ran. Reporting that as
+        // LUCKY or PREVENTED would score a request that was never made.
+        if (error instanceof MissingOptionalPackage && !hitInternal())
+            throw error;
+        // A late body cap, timeout, or network error cannot undo an internal hit.
+        // Independent server-side evidence takes priority over a client's claim.
+        if (hitInternal()) {
+            return finish('REACHED', 'the internal service recorded a request before the client reported an error');
+        }
+        if (error instanceof PolicyRefusal) {
+            return finish('BLOCKED', `${error.reason}: ${error.detail}`);
+        }
+        const failure = error instanceof Error ? error : new Error(String(error));
+        const detail = flatten(failure);
+        if (probe.recognizes?.(detail) === true) {
+            return finish('BLOCKED', `the client's own limit: ${detail}`);
+        }
+        if (missed()) {
+            return finish('PREVENTED', `the internal service saw no request; the attempt failed with ${detail}`);
+        }
+        return finish('LUCKY', `no policy; the request failed with ${detail}`);
+    }
+}
+/**
+ * Flatten an error and its causes into one line.
+ *
+ * Node's fetch reports "fetch failed" and keeps the reason in `cause`, so a
+ * check that reads only the message cannot tell a redirect cap from a DNS
+ * failure.
+ */
+function flatten(error) {
+    const parts = [];
+    let current = error;
+    while (current instanceof Error && parts.length < 4) {
+        parts.push(codeOf(current));
+        current = current.cause;
+    }
+    return parts.join(' <- ');
+}
+function describeReach(status, bytes, stoppedByHarness) {
+    const base = `status ${status}, ${bytes} bytes`;
+    return stoppedByHarness ? `${base}; the harness had to stop the read` : base;
+}
+function codeOf(error) {
+    const code = error.code;
+    return code ?? error.message;
+}
+//# sourceMappingURL=run.js.map

package/dist/checker/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/checker/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,aAAa,EAAmB,MAAM,sBAAsB,CAAA;AAErE,OAAO,EAAE,MAAM,EAAc,MAAM,aAAa,CAAA;AA4BhD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAkB,EAClB,KAAkB,EAClB,SAA2B,MAAM;IAEjC,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAU,EAAE,CACzC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,CAAA;IAEzD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;QACzB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC;KACvC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,KAAkB,EAAE,KAAY;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,EAAE,CAAA;IACvC,MAAM,WAAW,GAAG,GAAY,EAAE,CAChC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,GAAG,UAAU,CAAA;IACpE,MAAM,MAAM,GAAG,GAAY,EAAE,CAC3B,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,KAAK,UAAU,CAAA;IACtE,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAe,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;KACjC,CAAC,CAAA;IAEF,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAA;IAC7F,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,KAAK,KAAK;QACvC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,WAAW;QAC9C,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,gBAAgB,EAAE,+FAA+F,CAAC,CAAA;IAClI,CAAC;IAED,IAAI,CAAC;QACH,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACrD,aAAa,EAAE,KAAK,CAAC,MAAM;YAC3B,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAClC,CAAC,CAAA;QACF,qEAAqE;QACrE,2EAA2E;QAC3E,IAAI,WAAW,EAAE,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,SAAS,EAAE,2EAA2E,CAAC,CAAA;QACvG,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACtG,CAAC;QACD,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,WAAW,EAAE,qDAAqD,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,EAAE,sBAAsB,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,QAAQ,CAAC,CAAA;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,KAAK,YAAY,sBAAsB,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,KAAK,CAAA;QAE1E,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,WAAW,EAAE,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,SAAS,EAAE,6EAA6E,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,SAAS,EAAE,2BAA2B,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,WAAW,EAAE,gEAAgE,MAAM,EAAE,CAAC,CAAA;QACtG,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAY;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,GAAY,KAAK,CAAA;IAE5B,OAAO,OAAO,YAAY,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3B,OAAO,GAAI,OAA+B,CAAC,KAAK,CAAA;IAClD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,KAAa,EAAE,gBAAyB;IAC7E,MAAM,IAAI,GAAG,UAAU,MAAM,KAAK,KAAK,QAAQ,CAAA;IAC/C,OAAO,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,KAAY;IAC1B,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAA;IAClD,OAAO,IAAI,IAAI,KAAK,CAAC,OAAO,CAAA;AAC9B,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import { checkThenConnect } from './adapters/checkThenConnect.js';
+import { guardedFetch } from './adapters/guardedFetch.js';
+import { requestFilteringAgent, ssrfAgentClient, ssrfReqFilter } from './adapters/libraries.js';
+import { MissingOptionalPackage, missingOptionalPackages, } from './adapters/optional.js';
+import { plainFetch } from './adapters/plainFetch.js';
+import { vercelGuardedFetch } from './adapters/vercelGuardedFetch.js';
+import { DIRECT_PROBES, PROBES } from './checker/probes.js';
+import { LEGEND, renderJson, renderTable } from './checker/report.js';
+import { runScan } from './checker/run.js';
+import { startAttackRange } from './range/server.js';
+const CLIENTS = {
+    plain: plainFetch,
+    naive: checkThenConnect,
+    guarded: guardedFetch,
+    rfa: requestFilteringAgent,
+    'ssrf-req-filter': ssrfReqFilter,
+    'ssrf-agent': ssrfAgentClient,
+    'vercel-guarded': vercelGuardedFetch,
+};
+/** Clients that compare a package ssrf-lab does not install. */
+const REQUIRES = {
+    rfa: ['request-filtering-agent'],
+    'ssrf-req-filter': ['ssrf-req-filter'],
+    'ssrf-agent': ['ssrf-agent'],
+    'vercel-guarded': ['guarded-fetch'],
+};
+const GROUPS = {
+    all: ['plain', 'naive', 'guarded'],
+    libs: ['rfa', 'ssrf-req-filter', 'ssrf-agent'],
+};
+const SUITES = {
+    redirect: PROBES,
+    direct: DIRECT_PROBES,
+    all: [...PROBES, ...DIRECT_PROBES],
+};
+const USAGE = `ssrf-lab — run a local attack range against an HTTP client
+
+  ssrf-lab scan [--client <name|all|libs>] [--suite redirect|direct|all]
+                [--json] [--fail-on-reach] [--public-address]
+
+  --client         all (the 3 built-in clients), libs (the npm SSRF packages),
+                   or one of: ${Object.keys(CLIENTS).join(', ')}
+                   libs, rfa, ssrf-req-filter, ssrf-agent and vercel-guarded
+                   need the compared package installed beside ssrf-lab; the
+                   scan prints the install command when one is missing
+  --suite          redirect: attacks that start on the public range (default)
+                   direct:   one request at the internal service, in every
+                             spelling a URL parser accepts
+                   all:      both
+  --json           print machine-readable results
+  --fail-on-reach  exit 1 when any probe reports REACHED
+  --public-address use the isolated entry fixture; requires only lo with
+                   93.184.216.34/32 and no external routes (Linux only)
+`;
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.includes('--help') || argv.includes('-h') || argv[0] === undefined) {
+        process.stdout.write(USAGE);
+        return;
+    }
+    const json = argv.includes('--json');
+    const failOnReach = argv.includes('--fail-on-reach');
+    const which = flagValue(argv, '--client') ?? 'all';
+    const suiteName = flagValue(argv, '--suite') ?? 'redirect';
+    const suite = SUITES[suiteName];
+    const names = GROUPS[which] ?? [which];
+    const selected = names.map((name) => CLIENTS[name]);
+    if (suite === undefined) {
+        process.stderr.write(`unknown suite: ${suiteName}\n${USAGE}`);
+        process.exitCode = 2;
+        return;
+    }
+    if (selected.some((client) => client === undefined)) {
+        process.stderr.write(`unknown client: ${which}\n${USAGE}`);
+        process.exitCode = 2;
+        return;
+    }
+    const missing = await missingOptionalPackages(names.flatMap((name) => REQUIRES[name] ?? []));
+    if (missing.length > 0) {
+        process.stderr.write(`${new MissingOptionalPackage(missing).message}\n`);
+        process.exitCode = 2;
+        return;
+    }
+    const range = await startAttackRange({ publicAddress: argv.includes('--public-address') });
+    const scans = [];
+    try {
+        for (const client of selected) {
+            if (client === undefined)
+                continue;
+            scans.push(await runScan(client, range, suite));
+        }
+    }
+    finally {
+        await range.close();
+    }
+    if (json) {
+        process.stdout.write(`${renderJson(scans)}\n`);
+    }
+    else {
+        process.stdout.write(`${LEGEND}\n`);
+        for (const scan of scans)
+            process.stdout.write(`${renderTable(scan)}\n`);
+        process.stdout.write('\n');
+    }
+    if (failOnReach && scans.some((scan) => scan.reached > 0))
+        process.exitCode = 1;
+}
+function flagValue(argv, flag) {
+    const index = argv.indexOf(flag);
+    if (index >= 0)
+        return argv[index + 1];
+    const inline = argv.find((entry) => entry.startsWith(`${flag}=`));
+    return inline?.slice(flag.length + 1);
+}
+main().catch((error) => {
+    process.stderr.write(`${String(error)}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC/F,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GAExB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAc,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,OAAO,EAAmB,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD,MAAM,OAAO,GAA+B;IAC1C,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,YAAY;IACrB,GAAG,EAAE,qBAAqB;IAC1B,iBAAiB,EAAE,aAAa;IAChC,YAAY,EAAE,eAAe;IAC7B,gBAAgB,EAAE,kBAAkB;CACrC,CAAA;AAED,gEAAgE;AAChE,MAAM,QAAQ,GAA+C;IAC3D,GAAG,EAAE,CAAC,yBAAyB,CAAC;IAChC,iBAAiB,EAAE,CAAC,iBAAiB,CAAC;IACtC,YAAY,EAAE,CAAC,YAAY,CAAC;IAC5B,gBAAgB,EAAE,CAAC,eAAe,CAAC;CACpC,CAAA;AAED,MAAM,MAAM,GAAsC;IAChD,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;IAClC,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,CAAC;CAC/C,CAAA;AAED,MAAM,MAAM,GAAqC;IAC/C,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,aAAa;IACrB,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC;CACnC,CAAA;AAED,MAAM,KAAK,GAAG;;;;;;gCAMkB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;CAY9D,CAAA;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3B,OAAM;IACR,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,KAAK,CAAA;IAClD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,UAAU,CAAA;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAEnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,KAAK,KAAK,EAAE,CAAC,CAAA;QAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,KAAK,KAAK,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA;QACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAiB,EAAE,CAAA;IAE9B,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAQ;YAClC,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,IAAY;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IACjE,OAAO,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export { agentClient, type AgentClientSpec } from './adapters/agentClient.js';
+export { checkThenConnect } from './adapters/checkThenConnect.js';
+export { requestFilteringAgent, ssrfAgentClient, ssrfReqFilter } from './adapters/libraries.js';
+export { guardedFetch } from './adapters/guardedFetch.js';
+export { plainFetch } from './adapters/plainFetch.js';
+export { vercelGuardedFetch } from './adapters/vercelGuardedFetch.js';
+export { assertIsolatedNetwork, ISOLATED_PUBLIC_ADDRESS } from './range/isolation.js';
+export { PolicyRefusal, type ClientOptions, type FetchOutcome, type HttpClient, type RefusalReason, } from './adapters/types.js';
+export { DIRECT_PROBES, PROBES, type Probe } from './checker/probes.js';
+export { LEGEND, renderJson, renderTable } from './checker/report.js';
+export { runScan, type ProbeResult, type ScanResult, type Verdict } from './checker/run.js';
+export { decompressionBomb, BOMB_EXPANDED_BYTES } from './range/bomb.js';
+export { CANARY_BOMB_TAIL, CANARY_ENDLESS_CHUNK, CANARY_INTERNAL_SECRET, } from './range/canaries.js';
+export { startAttackRange, INTERNAL_PATH, RANGE_PATHS, type AttackRange } from './range/server.js';
+export { classifyAddress, isForbiddenAddress, METADATA_ADDRESS, type AddressClass, } from './util/addresses.js';
+export { flipLookup } from './util/flipLookup.js';

package/dist/index.js

@@ -0,0 +1,17 @@
+export { agentClient } from './adapters/agentClient.js';
+export { checkThenConnect } from './adapters/checkThenConnect.js';
+export { requestFilteringAgent, ssrfAgentClient, ssrfReqFilter } from './adapters/libraries.js';
+export { guardedFetch } from './adapters/guardedFetch.js';
+export { plainFetch } from './adapters/plainFetch.js';
+export { vercelGuardedFetch } from './adapters/vercelGuardedFetch.js';
+export { assertIsolatedNetwork, ISOLATED_PUBLIC_ADDRESS } from './range/isolation.js';
+export { PolicyRefusal, } from './adapters/types.js';
+export { DIRECT_PROBES, PROBES } from './checker/probes.js';
+export { LEGEND, renderJson, renderTable } from './checker/report.js';
+export { runScan } from './checker/run.js';
+export { decompressionBomb, BOMB_EXPANDED_BYTES } from './range/bomb.js';
+export { CANARY_BOMB_TAIL, CANARY_ENDLESS_CHUNK, CANARY_INTERNAL_SECRET, } from './range/canaries.js';
+export { startAttackRange, INTERNAL_PATH, RANGE_PATHS } from './range/server.js';
+export { classifyAddress, isForbiddenAddress, METADATA_ADDRESS, } from './util/addresses.js';
+export { flipLookup } from './util/flipLookup.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,EACL,aAAa,GAKd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,EAAc,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,OAAO,EAAmD,MAAM,kBAAkB,CAAA;AAC3F,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAA;AAClG,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/range/bomb.d.ts

@@ -0,0 +1,13 @@
+/** Expanded size of the decompression bomb: 64 MiB. */
+export declare const BOMB_EXPANDED_BYTES: number;
+/**
+ * Build a gzip body that is small on the wire and large in memory.
+ *
+ * 64 MiB of zeros compresses to about 64 KiB, a ratio of about 1000:1. A
+ * client that decompresses before it counts bytes allocates the whole 64 MiB,
+ * and a real attacker picks a much larger number.
+ *
+ * The tail carries a canary, so a client that streamed the WHOLE body can be
+ * told apart from one that stopped at a cap.
+ */
+export declare function decompressionBomb(): Buffer;

package/dist/range/bomb.js

@@ -0,0 +1,24 @@
+import { gzipSync } from 'node:zlib';
+import { CANARY_BOMB_TAIL } from './canaries.js';
+/** Expanded size of the decompression bomb: 64 MiB. */
+export const BOMB_EXPANDED_BYTES = 64 * 1024 * 1024;
+let cached = null;
+/**
+ * Build a gzip body that is small on the wire and large in memory.
+ *
+ * 64 MiB of zeros compresses to about 64 KiB, a ratio of about 1000:1. A
+ * client that decompresses before it counts bytes allocates the whole 64 MiB,
+ * and a real attacker picks a much larger number.
+ *
+ * The tail carries a canary, so a client that streamed the WHOLE body can be
+ * told apart from one that stopped at a cap.
+ */
+export function decompressionBomb() {
+    if (cached !== null)
+        return cached;
+    const zeros = Buffer.alloc(BOMB_EXPANDED_BYTES - CANARY_BOMB_TAIL.length, 0x30);
+    const payload = Buffer.concat([zeros, Buffer.from(CANARY_BOMB_TAIL, 'utf8')]);
+    cached = gzipSync(payload, { level: 9 });
+    return cached;
+}
+//# sourceMappingURL=bomb.js.map