Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-32804 — Docker-based reproduction environment for CVE-2021-32804, a path traversal vulnerability in node-tar affecting npm, with step-by-step exploitation scripts. | Kitploit
Tools/GitHubGitHub/yamory/cve-2021-32804
Container SecurityVulnerability AnalysisExploitationSupply Chain SecurityLearning & Education
GitHubyamory/cve-2021-32804

CVE-2021-32804

Docker-based reproduction environment for CVE-2021-32804, a path traversal vulnerability in node-tar affecting npm, with step-by-step exploitation scripts.

View Repository
1115 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-32804

This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm".

Environment Setup

root@kitploit:~
docker build -t cve-2021-32804 .
docker run -it cve-2021-32804 /bin/bash

Vulnerability Reproduction

node-tar

root@kitploit:~
root@5e1af2148215:/poc# node tar.js
root@5e1af2148215:/poc# su node
Hello, world!

npm

root@kitploit:~
root@5e1af2148215:/poc# npm i bashrc.tgz
root@5e1af2148215:/poc# su node
Hello, world!
Download Tool