Demo of evil package

rottendonkey is a demo to be used in security awareness training for developers. It allows remote code execution and should not be used in any real project.

WARNING

Using this package would allow anyone to take full control over your server/container/etc.

Usage

const donkey = request('rottendonkey');

var myoutput = donkey.evildonkeySync('command-to-run-on-machine') // returns string from stdout donkey.evildonkey('command-to-run') // does not run anything, runs command async