use get_hostname_options, normalize punycode

Author: bitterpanda63

aikido_zen/sinks/socket.py

@@ -8,12 +8,13 @@
 from aikido_zen.vulnerabilities import run_vulnerability_scan
 from aikido_zen.thread.thread_cache import get_cache
 from aikido_zen.errors import AikidoSSRF
+from aikido_zen.vulnerabilities.ssrf.get_hostname_options import get_hostname_options
 
 
 @before
 def _getaddrinfo_before(func, instance, args, kwargs):
     """Before wrapper for getaddrinfo - handles blocking"""
-    host = get_argument(args, kwargs, 0, "host")
+    host_argument = get_argument(args, kwargs, 0, "host")
 
     # Check if we should block this outgoing request based on configuration
     cache = get_cache()
@@ -24,10 +25,12 @@ def _getaddrinfo_before(func, instance, args, kwargs):
         if context and cache.is_bypassed_ip(context.remote_address):
             return
 
-        if cache.config.should_block_outgoing_request(host):
-            raise AikidoSSRF(
-                f"Zen has blocked an outbound connection: socket.getaddrinfo to {host}"
-            )
+        hostnames = [host_argument] + get_hostname_options(host_argument)
+        for host in hostnames:
+            if cache.config.should_block_outgoing_request(host):
+                raise AikidoSSRF(
+                    f"Zen has blocked an outbound connection: socket.getaddrinfo to {host}"
+                )
 
     op = "socket.getaddrinfo"
     register_call(op, "outgoing_http_op")