Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
full-site-screenshot
Advanced tools
This small utility package provides a cli for automating the capture of screenshots for multiple pages across a website using puppeteer full page screenshots.
This small utility package provides a cli for automating the capture of screenshots for multiple pages across a website using puppeteer full page screenshots.
It will output all captures individually and optionally create a PDF with all of them as well.
You can install the package globally with
npm install -g full-site-screenshot
Or you can simple run directly using npx instead
npx full-site-screenshot
The capture cli has three modes for selecting the target web pages:
Once you select your targets you can pick a loading strategy to make sure lazy loaded images and other content is captured:
The cli will then walk you through some options like the desired viewport width for the capture and whether you want to create a PDF in addition to individual images.
You will also be prompted to choose an "interaction delay" this is to allow assets to load and for any intro animations to complete. The default is 5 seconds. You can reduce to speed up captures, but if elements are missing try increasing this value to make sure everything is loaded properly.
All outputted images and the pdf will be placed into a screencapture-output directory created within the working directory when the package is called.
For some sites you may need additional logic like closing cookie banners, clicking on modals or accordions, etc.
This package is intentionally slim and does not handle these cases. Instead, you can download the soruce files for this package from github where there is a branch called "custom-actions". This gives you an entry point to add additional logic when the page loads. You can fork this or simply download and use as you see fit.
FAQs
This small utility package provides a cli for automating the capture of screenshots for multiple pages across a website using puppeteer full page screenshots.
We found that full-site-screenshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.