hunt-nodejs

Detect Node.js vulnerabilities and attempt RCE chains via child_process.exec.

Updated Jun 24, 2026

Search Tags:#nodejs #vulnerability detection #security assessment #rce chain #express trust proxy

Ready to run

npx skills add https://github.com/Skobyn/talon --skill hunt-nodejs-skobyn

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-nodejs
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-nodejs
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-nodejs-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Hunt Node.js vulnerabilities, identify RCE chains, and perform specific security assessments.

Core Features & Use Cases

Vulnerability Detection: Detect Prototype Pollution, Express trust proxy misconfiguration, and more.
RCE Chain Execution: Attempt RCE chains for Node.js backends using different attack vectors.
Attack Surface Analysis: Analyze server response headers and environment to confirm presence of Node.js.
Quick Fingerprinting: Confirm the presence of Node.js/Express by analyzing headers and error messages.

Quick Start

Use the hunt-nodejs skill to scan a target application for Node.js vulnerabilities and RCE chains.

Frequently Asked Questions about hunt-nodejs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect Node.js vulnerabilities in my web application?▼

To detect Node.js vulnerabilities, the skill analyzes server response headers and error messages to fingerprint the backend, then validates specific flaws like Prototype Pollution and Express trust proxy misconfiguration.

What is the best way to test for Prototype Pollution in an Express backend?▼

Testing for Prototype Pollution involves identifying and validating Node.js-specific vulnerabilities within the application, checking if attack vectors successfully manipulate object prototypes to alter application behavior.

Can I execute RCE chains through child_process.exec in Node.js?▼

Yes, you can execute RCE chains by attempting to run code through sinks like child_process.exec, leveraging identified vulnerabilities to achieve remote code execution on the Node.js target.

Does Express trust proxy misconfiguration lead to security issues?▼

Express trust proxy misconfiguration creates security issues by allowing attackers to spoof IP addresses and bypass access controls, which this skill specifically identifies and validates during assessment.

How do I fingerprint a server to confirm it is running Node.js?▼

To fingerprint a server and confirm Node.js, the skill performs environment and server header analysis, inspecting specific response headers and error message patterns to verify the backend technology.