Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
http-server-node — Synthetic vulnerable Node.js HTTP server used as a demo target for the EXPOSURE vulnerability scanner, tracking CVE-2021-23797 with a one-click PR-based fix workflow. | Kitploit
Tools/GitHubGitHub/dannyendortest/http-server-node
Vulnerability ScannersVulnerability AnalysisSupply Chain SecurityLearning & EducationLabs & Practice
GitHubdannyendortest/http-server-node

http-server-node

Synthetic vulnerable Node.js HTTP server used as a demo target for the EXPOSURE vulnerability scanner, tracking CVE-2021-23797 with a one-click PR-based fix workflow.

View Repository
13 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

http-server-node

This repository is a synthetic demo target for Endor Labs EXPOSURE.

  • The current state is deliberately vulnerable (HOT). EXPOSURE will report a HOT verdict against it.
  • Tracked CVE: CVE-2021-23797 (no upstream fix; mitigated only via a compensating control).
  • A demo PR opened by EXPOSURE swaps the canonical configuration file for a hardened variant that breaks the exploit chain — without upgrading the vulnerable dependency.
  • The customer effort to apply the fix is one click (review + merge).

This repo is not a production application. It exists only to anchor the EXPOSURE "click → real PR opens" demo against a real GitHub repository.

Download Tool