Skip to content

Access Control: Exposed Node.js Inspector

Identifier: node_inspector_exposed

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

Node.js inspector endpoints exposed to untrusted networks can allow attackers to inspect and control a running process.

How we test: We identify publicly reachable Node.js inspector services and report them when the debugging interface is exposed.

Configuration

Example

Example configuration:

---
security_tests:
  node_inspector_exposed:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.