Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
pipe raw http traffic from incoming http requests to remote endpoints
Route requests based on the host field to servers on ports 8001 and 8002:
var bouncy = require('bouncy');
var server = bouncy(function (req, res, bounce) {
if (req.headers.host === 'beep.example.com') {
bounce(8001);
}
else if (req.headers.host === 'boop.example.com') {
bounce(8002);
}
else {
res.statusCode = 404;
res.end('no such host');
}
});
server.listen(8000);
bouncy(cb)
returns a new net.Server object that you can .listen()
on.
If you specify opts.key
and opts.cert
, the connection will be set to secure
mode using tls. Do this if you want to make an https router.
If the arity of cb
is 3, you'll get the response object res
in
cb(req, res, bounce)
.
Otherwise you just get cb(req, bounce)
.
If you are using more than one SSL cert, add opts.SNICallback
.
See the example http-https-sni.js and the
nodejs tls page
for details.
Call this function when you're ready to bounce the request to a stream.
The exact request that was received will be written to stream
and future
incoming data will be piped to and from it.
To send data to a different url path on the destination stream, you can specify
opts.path
.
To change the http verb you can set opts.method
.
You can specify header fields to insert into the request with opts.headers
.
bounce()
returns the stream object that it uses to connect to the remote host.
These variants of bounce()
are sugar for
bounce(net.connect(port))
and bounce(net.connect(port, host))
.
Optionally you can pass port and host keys to opts
and it does the same thing.
Passing bounce()
a string that looks like a url (with or without "http://"
)
will set the opts.host, opts.port, and opts.path accordingly.
usage: bouncy FILE PORT
Create a routes FILE like this:
{
"beep.example.com" : 8000,
"boop.example.com" : 8001
}
Then point the `bouncy` command at this `routes.json` file and give it
a port to listen on:
bouncy routes.json 80
The `routes.json` file should just map host names to host/port combos. Use a
colon-separated string to specify a host and port in a route.
Use `""` for the host as a default route.
You can optionally specify a listen address as the third parameter or with
`--address`. It defaults to `0.0.0.0`. Specify `::` to listen on both IPv4 and
IPv6 addresses.
With npm, to get the library do:
npm install bouncy
or to install the command-line tool do:
npm install -g bouncy
MIT
FAQs
route incoming http requests to http servers
The npm package bouncy receives a total of 234 weekly downloads. As such, bouncy popularity was classified as not popular.
We found that bouncy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.