
Research
/Security News
Fake imToken Chrome Extension Steals Seed Phrases via Phishing Redirects
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.
@0x4447/avocado
Advanced tools
🥑 build the output of a front-end page to be hosted on S3 and delivered by CloudFront
After having created the useful 0x4447 Potato 🥔 CLI, we found that deploying a simple HTML page to AWS CloudFront, a page that is not build around a framework, is annoying and time consuming. This is why we came up with the idea for Avocado: a CLI that will build the final page out of a simple folder structure by using the awesome templating engine–Hogan.
] sudo npm install -g @0x4447/avocado
] avocado -s PATH_TO_FOLDER
] avocado -h
_preview and _output folder, this way we have a clean slate._preview and _output folder.data folder to help Hogan enrich the pages._preview and _output folder..html ending from any HREF on the page.The last steps is done, to make sure the URL on the page points to something like this https://0x4447.com/contact, instead of https://0x4447.com/contact.html. Since 0x4447 Potato will strip the file format from the .html files.
If you'd like to try out Avocado, you can take a look at our company website repository. The structure of the project was set to make it easy to use it with AWS CodeBuild.
The root folder will contain the _input folder where the content of the site is located. The data, and views folders holds the data and the HTML files which are used to generate the previews and final output.
All the other files and folders in the root directory are for CodeBuild itself.
If you want to work on the content of the site on you local machine, then you can use Nginx for that. Nginx will use the dummy SSL certificate called snakeoil, to deliver the site over HTTPS. If you don't have it in your system you can generate one using the following command.
sudo apt-get install ssl-certsudo make-ssl-cert generate-default-snakeoilsudo
usermod --append --groups ssl-cert $(whoami)
Bellow you can find the bare minimum configuration to make it all work.
#
# Server Configuration
#
server {
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
#
# Use the a default SSL for development.
#
include snippets/snakeoil.conf;
#
# Tell which folder to server.
#
root /PATH/YOUR_SITE_NAME/_output;
#
# Set the default file.
#
index /home;
#
# Tell Nginx which url is this configuration for.
#
server_name login.example.loc;
#
# Default configuration.
#
location / {
#
# Since we deliver files with no extension, we need to tell
# Nginx what those files are.
#
default_type text/html;
#
# Tell the browser that any Origin file is OK.
#
add_header Access-Control-Allow-Origin *;
#
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
#
try_files $uri $uri.html $uri/ =404;
}
}
This CLI tools works well also with the following software:
If you enjoyed this project, please consider giving it a 🌟. And check out our 0x4447 GitHub account, where we have additional resources that you might find useful or interesting.
This project is brought to you by 0x4447 LLC, a software company specializing in build custom solutions on top of AWS. Find out more by following this link: https://0x4447.com or, send an email at hello@0x4447.email.
FAQs
🥑 build the output of a front-end page to be hosted on S3 and delivered by CloudFront
We found that @0x4447/avocado demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.

Security News
Latio’s 2026 report recognizes Socket as a Supply Chain Innovator and highlights our work in 0-day malware detection, SCA, and auto-patching.

Company News
Join Socket for live demos, rooftop happy hours, and one-on-one meetings during BSidesSF and RSA 2026 in San Francisco.