Check a URL for Server-Side Request Forgery (SSRF) Threats in Node.js

It’s time to cover how the Cloudmersive Security Threat Detection API can be used for identifying threats at the Network level. The security/threat-detection/network/url/ssrf/detect API is a Cloudmersive service which protects your network by looking at a URL input to see if it’s hiding a Server-Side Request Forgery (SSRF) attack. SSRF attacks are typically used to work around firewalls — so it’s important to be on the lookout for this threat, even if you think your network is adequately protected.

Getting this API running in your environment is easy. The first step is to use the below command for SDK installation:

npm install cloudmersive-security-api-client --save

Or, you’ll find below an option to add a snippet for your package.json:

"dependencies": {
    "cloudmersive-security-api-client": "^1.2.0"
  }

After these initial steps, all you need to do is use the ready-to-run callback function below. If the function is called successfully, it should return a result in the format depicted in figure 1.

var CloudmersiveSecurityApiClient = require('cloudmersive-security-api-client');
var defaultClient = CloudmersiveSecurityApiClient.ApiClient.instance;
// Configure API key authorization: Apikey
var Apikey = defaultClient.authentications['Apikey'];
Apikey.apiKey = 'YOUR API KEY';
var apiInstance = new CloudmersiveSecurityApiClient.NetworkThreatDetectionApi();
var request = new CloudmersiveSecurityApiClient.UrlSsrfThreatDetectionRequestFull(); // UrlSsrfThreatDetectionRequestFull | Input URL request
var callback = function(error, data, response) {
  if (error) {
    console.error(error);
  } else {
    console.log('API called successfully. Returned data: ' + data);
  }
};
apiInstance.networkThreatDetectionDetectSsrfUrl(request, callback);

Figure 1. Example Value Response Model