registry / n8n-nodes-pwn / 1.0.1

n8n-nodes-pwn@1.0.1

Minimal PoC package used for authorized security research (CTF training exercise) to demonstrate n8n's community-package installation feature executing arbitrary code outside the Code node's VM2 sandbox. Not intended for real-world use.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Importing the package entrypoint or n8n node executes host reconnaissance and attempts to collect root-owned text/flag files. The collected command output is exfiltrated over HTTP.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Requiring index.js or loading dist/nodes/Pwn/Pwn.node.js in n8n.

Impact

Host and potentially sensitive root-readable file contents are sent to a hard-coded external host.

Mechanism

Import-time shell reconnaissance, file collection, and HTTP exfiltration.

Attack narrative

Both exported entry paths execute immediately when loaded. They run fixed reconnaissance commands, search the filesystem for flags, list /root, and attempt to read root text and flag files. Results are saved under /tmp and POSTed to a hard-coded IP address. The inert n8n execute method does not prevent the import-time payload.

Rationale

The package contains concrete, import-triggered command execution and exfiltration rather than a merely user-invoked administrative feature. Its stated research purpose does not remove the active collection and network-transfer behavior.

Evidence

package.jsonindex.jsdist/nodes/Pwn/Pwn.node.jsREADME.md/tmp/.pwnout/tmp/.pwnerr/root/root/*.txt/root/flag*

Network endpoints1

10.0.0.145:8000/rce-out

n8n-nodes-pwn@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code