id: nodejs-framework-exceptions

info:
  name: Node.js Framework Exceptions
  author: Aayush Dhakal
  severity: info
  description: Detects suspicious Node.js framework exceptions that could indicate exploitation attempts
  reference:
    - https://expressjs.com/en/guide/error-handling.html
    - https://nodejs.org/en/docs/guides
  tags: file,logs,nodejs

file:
  - extensions:
      - all

    extractors:
      - type: regex
        name: exception
        part: body
        regex:
          - 'TypeError'
          - 'ReferenceError'
          - 'SyntaxError'
          - 'ValidationError'
          - 'UnauthorizedError'
          - 'ForbiddenError'
          - 'NotFoundError'
          - 'InternalServerError'
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
# digest: 490a0046304402207844169919b73fcb50fe7c4e4c0fdbd6cc324d50d378712977c6ed109735def002204344d9ca571a789046168cea60ff2653038398165bb362242140febace5f6a26:922c64590222798bb761d5b6d8e72950