Skip to content
Nuclei Templates

Node Shrinkwrap Exposure

ID: npm-shrinkwrap-exposure

Severity: info

Author: DhiyaneshDk,noraj

Tags: config,exposure,npm,files,node

Description

Section titled “Description”

A file created by npm shrinkwrap. It is identical to package-lock.json.

YAML Source

Section titled “YAML Source”
id: npm-shrinkwrap-exposure


info:
  name: Node Shrinkwrap Exposure
  author: DhiyaneshDk,noraj
  severity: info
  description: |
    A file created by npm shrinkwrap. It is identical to package-lock.json.
  reference:
    - https://docs.npmjs.com/cli/v9/configuring-npm/npm-shrinkwrap-json
  classification:
    cpe: cpe:2.3:a:npmjs:npm:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: npmjs
    product: npm
    shodan-query: html:"npm-shrinkwrap.json"
  tags: config,exposure,npm,files,node


http:
  - method: GET
    path:
      - "{{BaseURL}}/npm-shrinkwrap.json"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - "version"
          - "dependencies"
        condition: and


      - type: word
        part: header
        words:
          - "application/json"


      - type: status
        status:
          - 200
# digest: 4a0a0047304502210080b327712dbccc163598d07cdad365dfc14c88314ec74d939bbfe3c9f7ce237602200ad55f309a26ad37bebddef2e1c098b2734816b902ef3bec3f8e456db3d5efaf:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposures/files/npm-shrinkwrap-exposure.yaml"

View on Github