Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
node-vulnerable — Synthetic demo target for EXPOSURE — CVE-2018-21268 (traceroute) + CVE-2018-3757 (pdf-image) | Kitploit
Tools/GitHubGitHub/dannyendortest/node-vulnerable
Vulnerability ScannersVulnerability AnalysisCode AnalysisDevSecOpsSupply Chain SecurityLearning & Education
GitHubdannyendortest/node-vulnerable

node-vulnerable

Synthetic demo target for EXPOSURE — CVE-2018-21268 (traceroute) + CVE-2018-3757 (pdf-image)

View Repository
3 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

node-vulnerable

This repository is a synthetic demo target for Endor Labs EXPOSURE.

  • The current state is deliberately exploitable. EXPOSURE will report an exploitable verdict against it.
  • Tracked CVEs:
    • CVE-2018-21268 — traceroute command injection via the host argument. Exploitable in this baseline (no input validation). No upstream fix.
    • CVE-2018-3757 — pdf-image command injection via the file-path argument. Not exploitable in this baseline (the /render route regex-validates the path before constructing PDFImage). No upstream fix.
  • A demo PR opened by EXPOSURE swaps src/main.js for a hardened variant that adds a strict hostname regex before traceroute.trace, closing the compensating-control lane — without upgrading the vulnerable dependency.
  • The customer effort to apply the fix is one click (review + merge).

This repo is not a production application. It exists only to anchor the EXPOSURE "click → real PR opens" demo against a real GitHub repository.

Download Tool