The socket module for low-level network operations. socket.connect() is an SSRF primitive when the host / port comes from user input. socket.bind() on 0.0.0.0 is a finding for services that should be localhost-only.
.connect().bind().create_connection().connect()Sinksocket.connect(address: tuple | str) -> None
Connects to a remote address. SSRF sink when address is user-controlled.
0.bind()Sinksocket.bind(address: tuple | str) -> None
Binds to a local address. Finding when bound to 0.0.0.0 or '' on internal services.
0.create_connection()Sinksocket.create_connection(address, timeout=..., source_address=None) -> socket
High-level connection helper. SSRF sink on address.
0.socket()Neutralsocket.socket(family=AF_INET, type=SOCK_STREAM, proto=0, fileno=None) -> socket
Creates a socket. Neutral.
| FQN | Field | |
|---|---|---|
| socket | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PySocket