Add extra test case for IMDS but with no context set

Author: bitterpanda63

agent_api/src/test/java/collectors/DNSRecordCollectorTest.java

@@ -1,11 +1,14 @@
 package collectors;
 
+import dev.aikido.agent_api.background.cloud.api.events.DetectedAttack;
 import dev.aikido.agent_api.collectors.DNSRecordCollector;
 import dev.aikido.agent_api.context.Context;
 import dev.aikido.agent_api.context.ContextObject;
+import dev.aikido.agent_api.storage.AttackQueue;
 import dev.aikido.agent_api.storage.Hostnames;
 import dev.aikido.agent_api.storage.HostnamesStore;
 import dev.aikido.agent_api.storage.ServiceConfigStore;
+import dev.aikido.agent_api.vulnerabilities.Attack;
 import dev.aikido.agent_api.vulnerabilities.ssrf.SSRFException;
 import dev.aikido.agent_api.vulnerabilities.ssrf.StoredSSRFException;
 import org.junit.jupiter.api.*;
@@ -29,12 +32,14 @@ void setup() throws UnknownHostException {
         inetAddress1 = InetAddress.getByName("1.1.1.1");
         inetAddress2 = InetAddress.getByName("127.0.0.1");
         imdsAddress1 = InetAddress.getByName("169.254.169.254");
+        AttackQueue.clear();
     }
 
     @AfterEach
     public void cleanup() {
         HostnamesStore.clear();
         Context.set(null);
+        AttackQueue.clear();
     }
 
     @Test
@@ -129,4 +134,31 @@ public void testHostnameSameWithContextAsAStoredSSRFAttack() {
             });
         });
     }
+
+    @Test
+    public void testStoredSSRFWithNoContext() throws InterruptedException {
+        ServiceConfigStore.updateBlocking(true);
+
+        Context.set(null);
+
+        Exception exception = assertThrows(StoredSSRFException.class, () -> {
+            DNSRecordCollector.report("dev.aikido", new InetAddress[]{
+                imdsAddress1, inetAddress2
+            });
+        });
+        DetectedAttack.DetectedAttackEvent event = (DetectedAttack.DetectedAttackEvent) AttackQueue.get();
+        assertEquals("stored_ssrf", event.attack().kind());
+        assertNull(event.request());
+
+        assertEquals("Aikido Zen has blocked a stored server-side request forgery", exception.getMessage());
+
+        assertDoesNotThrow(() -> {
+            DNSRecordCollector.report("metadata.goog", new InetAddress[]{
+                imdsAddress1, inetAddress2
+            });
+            DNSRecordCollector.report("metadata.google.internal", new InetAddress[]{
+                imdsAddress1, inetAddress2
+            });
+        });
+    }
 }