@vapurrmaid/smorgasbord v0.5.1

Smorgasbord

Smorgasbord checks endpoint(s) for a variety of served files that should not be exposed. The tool was inspired by a post detailing that 1 in every 600 websites has .git exposed.

SECURITY NOTE: It is generally preferable to favor whitelists over blacklists. Use a directory structure of build so that only specified content is located in the webserver root.

Usage

It is intended that overtime, the tool may be used with CI/CD, actions and related workflows.

Install Globally

npm install -g @vapurrmaid/smorgasbord

Install Locally

npm install @vapurrmaid/smorgasbord

Command Line Interface

Usage: smorgasbord [options] [command]

Options:
  -h, --help   output usage information

Commands:
  probe <uri>  Probes uri for vulnerable resources.

Commands

Probe

Usage: smorgasbord probe [options] <uri>

Probes uri for vulnerable resources.

Options:
  -h, --help  output usage information