Understand and mitigate the risks of Server-Side Request Forgery (SSRF) in FastAPI applications. This course covers detection, prevention, secure coding practices, and more.
Overview
Syllabus
- Unit 1: Understanding SSRF Vulnerabilities
- Detecting Internal Network SSRF Patterns
- Detect Unsafe URL Schemes
- Comprehensive URL Safety Check
- Prevent Unsafe Server Side Requests
- Unit 2: Preventing SSRF in FastAPI
- Basic Input Validation for SSRF Prevention
- URL Parsing and Scheme Validation
- Domain Whitelisting for Outbound Requests
- Block Internal IPs with ipaddress
- Complete SSRF Protection in FastAPI
- Unit 3: Monitoring and Responding to SSRF Incidents
- Setting Up Request Logging
- Enhance SSRF Pattern Detection
- Configure and Test Email Alerting
- Track and Respond to SSRF Incidents
- Admin Endpoint for Incident Review
- Unit 4: Security Logging and Monitoring in FastAPI Applications
- Implementing HTTP Request Logging
- Separate Error Logs
- Detect and Log Suspicious URL Requests
- Real Time Security Log Dashboard
- Email Alerting for Suspicious Activity