Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dmitrytavern/website-screenshoter
Advanced tools
Make screenshots and device emulations form your terminal
Makes web screenshots and mobile emulations from the command line.
Fork of vladocar/screenshoteer
Tool based on puppeteer.
npm i -g @dmitrytavern/website-screenshoter
You can use screenshoter like this:
website-screenshoter --url https://www.example.com
or .html localy copy the url path from the browser
website-screenshoter --url file:///Users/../index.html
website-screenshoter --url file:///C:/Users/../Random-HTML-file.html
And with the help of puppeteer(Headless Chrome) it will generate screenshot of the entire web page.
Parameters:
-h help
--url web page url
--emulate - emulate web device example: --emulate "iPhone 6"
--fullpage - can be true or false. It will take screenshot of entire web page if is true. True is the default parameter.
--pdf - generate additional pdf
--w - width of the Web Page in px
--h - height of the Web Page in px
--waitfor - wait time for the page load in milliseconds
--waitforselector - wait for the selector to appear in page
--el - css selector document.querySelector
--auth - basic http authentication
--no - exclude "image", "stylesheet", "script", "font"
--click - example: ".selector>a" excellent way to close popups or to click some buttons on the page.
--file - output file name (optional, otherwise based on page title and timestamp)
--theme - switch to dark or light color theme
--vd - Emulate vision deficiency 'achromatopsia', 'deuteranopia', 'protanopia', 'tritanopia', 'blurredVision', and 'none'
website-screenshoter --url https://news.ycombinator.com --fullpage false
website-screenshoter --url https://www.reddit.com/r/nodejs --emulate "iPhone 7"
website-screenshoter --url https://www.nytimes.com --emulate "Nexus 4"
website-screenshoter --url https://www.reddit.com/r/javascript/ --w 600 --h 800 --fullpage false
website-screenshoter --url https://www.reddit.com/r/javascript/ --w 600 --h 0 --fullpage false
website-screenshoter --url https://lobste.rs --pdf
website-screenshoter --url https://lobste.rs --w 500
website-screenshoter --url https://news.ycombinator.com/item?id=18598672 --el ".fatitem"
website-screenshoter --url https://site.com --auth "username;password"
website-screenshoter --url https://www.nytimes.com --no "image"
website-screenshoter --url https://www.nytimes.com --no "script"
website-screenshoter --url https://www.economist.com/ --click ".ribbon__close-button"
website-screenshoter --url file:///Users/../index.html
website-screenshoter --url https://www.slashdot.org --file /tmp/slashdot.png
website-screenshoter --url https://mxb.dev/blog/color-theme-switcher/ --theme dark
website-screenshoter --url https://news.ycombinator.com --vd blurredVision
List of of supported mobile devices: https://github.com/GoogleChrome/puppeteer/blob/master/DeviceDescriptors.js
MIT - check repo files
Copyright (c) 2023-present, Dmitry Tavern
FAQs
Make screenshots and device emulations form your terminal
We found that @dmitrytavern/website-screenshoter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.