mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-27 07:02:13 +00:00
4a941df787
Simple docker-compose environment that starts a simple express server with a poorly-designed /api/exec/<cmd> endpoint that executes arbitrary commands, and uses falco to detect running bash.
26 lines
834 B
JavaScript
26 lines
834 B
JavaScript
var express = require('express'); // call express
|
|
var app = express(); // define our app using express
|
|
var child_process = require('child_process');
|
|
|
|
var port = process.env.PORT || 8080; // set our port
|
|
|
|
// ROUTES FOR OUR API
|
|
// =============================================================================
|
|
var router = express.Router(); // get an instance of the express Router
|
|
|
|
// test route to make sure everything is working (accessed at GET http://localhost:8080/api)
|
|
router.get('/', function(req, res) {
|
|
res.json({ message: 'API available'});
|
|
});
|
|
|
|
router.get('/exec/:cmd', function(req, res) {
|
|
var output = child_process.execSync(req.params.cmd);
|
|
res.send(output);
|
|
});
|
|
|
|
app.use('/api', router);
|
|
|
|
app.listen(port);
|
|
console.log('Server running on port: ' + port);
|
|
|