Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@activeprospect/testlead
Advanced tools
A simple command-line utility to generate test lead posts with fake data
This LeadConduit test script takes a posting URL, and an optional list of standard field names. It generates fake but legitimate-looking data and posts it to the given URL.
Suitable for global installation:
npm install -g @activeprospect/testlead
Usage is: testlead [ -d "key1=val1,key2=val2" ] [ -o [ -b browsername ]] [ -p n ] url [ fields...]
$ testlead https://next.staging.leadconduit.com/flows/549093d1600f56d6475fa79f/sources/541887ea14251b0336f9dba1/submit email first_name city postal_code
Lead posted for Cesar.Kulas@gmail.com to https://next.staging.leadconduit.com/flows/549093d1600f56d6475fa79f/sources/541887ea14251b0336f9dba1/submit ({"outcome":"success","lead":{"id":"5ab0239c1438145681fbc025"}})
The data sent for the fields listed at the end of the command string (or the default field set, if none listed) is random, fake data. Use the -d
option to include set, non-fake data in your test lead. For example, if your flow has a filter to reject juveniles and anyone outside of Texas, you could force those values with -d "age=19&state=TX&foo=bar bip bap"
(note that if you provide more than one value, or a value with spaces, you'll need to quote the value or escape those characters).
Specify this flag to open the posted lead's detail in LeadConduit in your
default browser (or in the browser you specify with -b
).
Output verbose details about the request (URL and body) and response (status, body, headers, and err).
This option adds some randomness, and is most useful in crontab
-scripted scenarios. Using this, you can schedule the script to run on a simple every-minute schedule, but control the overall rate of posts to something less than one per minute.
If -p
(or --probability
) is given, with a number between 0 and 100, the script will generate a number in that range, and only post a lead if the value is less than this optional value.
For example, with -p 10
, a lead will only be posted about 10% of the time, whereas with -p 95
, a post will usually happen.
The output will state when the probability isn't met:
Skipping post to https://next.staging.leadconduit.com/flows/549093d1600f56d6475fa79f/sources/541887ea14251b0336f9dba1/submit
The final parameter supported is a list of LeadConduit-standard fields. If not specified, the test lead will be made up of email
, first_name
, and last_name
.
The first parameter listed (or email
if none are given) is used in the log output.
FAQs
A simple command-line utility to generate test lead posts with fake data
We found that @activeprospect/testlead demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 25 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.