hunt-nestjs

What problem does it solve?

NestJS's unique architectural patterns—including decorators, dependency injection, multi-layer guard stacks, and multi-transport microservice support—create security flaws that generic vulnerability scanners often miss, leaving applications exposed to targeted attacks that exploit framework-specific logic gaps.

Core Features & Use Cases

• Guard Bypass Detection: Identifies gaps in NestJS's guard resolution order (global → controller → method) where authentication can be skipped via decorator misconfigurations, route parameter confusion, or custom metadata key mismatches.
• Framework-Specific Exploit Testing: Tests for ValidationPipe type coercion exploits, ClassSerializerInterceptor absence leading to sensitive data leaks (password hashes, internal notes), and microservice transport authentication drift across TCP, Redis, NATS, and gRPC.
• Use Case: A penetration tester assessing a NestJS-based e-commerce API can use this skill to quickly uncover unauthenticated admin endpoints, extract sensitive user data from unsecured serialization responses, and exploit missing authentication on exposed internal microservice channels.

Quick Start

Use the hunt-nestjs skill to test a target NestJS API for unauthenticated admin endpoints, sensitive data leaks in user serialization responses, and missing authentication on exposed microservice transports.