Function test_network_binding

tests/security/test_access_control.py:98–123

Test network binding restrictions

(tester)

def test_network_binding(tester):
    """Test network binding restrictions"""
    print("\n[*] Testing network binding...")

    # Test 1: Check if bound to localhost only
    print("  - Checking bind address...")
    try:
        # Try to connect from localhost
        with SerialStudioClient("127.0.0.1", 7777) as client:
            client.command("api.getCommands")
            print("    Accessible from 127.0.0.1 (localhost)")

        # Try to connect from 0.0.0.0 (would work if bound to all interfaces)
        try:
            with SerialStudioClient("0.0.0.0", 7777) as client:
                client.command("api.getCommands")
                tester.log_vulnerability(
                    "CRITICAL",
                    "Network Exposure",
                    "API accessible from all network interfaces (0.0.0.0)",
                )
        except:
            print("    Not accessible from 0.0.0.0 (GOOD)")

    except Exception as e:
        print(f"    Error: {e}")


def test_origin_validation(tester):