Any references for digital-ocean-ssrf

[0xPugal]

Any references or information for digital-ocean-ssrf template?

[MetzinAround]

Hi @0xpugazh , what information are you looking for?

[0xPugal]

The response of this template shows info about my Digital Ocean droplet only.

{
  "droplet_id": XXXXXXXXXX,
  "hostname": "ubuntu-s-2vcpu-4gb-blr1-01",
  "vendor_data": "...............................................
........................................................................................................
........................................................................................................
........................................................................................................
........................................................................................................
........................................................................................................
........................................................................................................",
  "public_keys": [],
  "auth_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "region": "blr1",
  "interfaces": {
    "private": [
      {
        "ipv4": {
          "ip_address": "xx.xx.xx.xx",
          "netmask": "xxx.xxx.xxx.xx",
          "gateway": "xx.xx.xx.xx."
        },
        "mac": "xx.xx.xx.xx.",
        "type": "private"
      }
    ],
    "public": [
      {
        "ipv4": {
          "ip_address": "XX.XX.XX.XX",
          "netmask": "XXX.XXX.XXX.X",
          "gateway": "XX.XX.XX.XX"
        },
        "anchor_ipv4": {
          "ip_address": "xx.xx.xx.xx",
          "netmask": "xxx.xxx.xxx.xx",
          "gateway": "xx.xx.xx.xx"
        },
        "mac": "Xe:XX:aX:XX:XX:aX",
        "type": "public"
      }
    ]
  },
  "floating_ip": {
    "ipv4": {
      "active": false
    }
  },
  "reserved_ip": {
    "ipv4": {
      "active": false
    }
  },
  "dns": {
    "nameservers": [
      "XX.XX.XX.XX",
      "XX.XX.XX.X"
    ]
  },
  "tags": null,
  "features": {
    "dhcp_enabled": false
  },
  "modify_index": 2,
  "dotty_status": "running",
  "ssh_info": {
    "port": 22
  }
}

[princechaddha]

@DhiyaneshGeek

[DhiyaneshGeek]

Hi @0xpugazh Did you ran the template inside a digital ocean droplet ?

[0xPugal]

Yes, I ran the template inside a DigitalOcean droplet.

[DhiyaneshGeek]

Hi @0xpugazh yup, this is an edge case and intended to discloses the own metadata

[princechaddha]

@DhiyaneshGeek Perhaps we could potentially address it by adding an additional request to confirm its execution on the DigitalOcean.