n8n-nodes-soar

Overview

Integrate Docker execution into n8n workflows for automation and infrastructure teams, extending to Kubernetes and security scanning tools such as Masscan, Naibu, Nuclei, Subfinder, and Fofa for orchestrated operations.

Nodes & Operations

Collector

Collect asset information from workflow outputs, aggregating details about assets within a process flow, preceding any downstream operations that depend on complete asset data, with the Default resource and operation available for execution triggers.

• Default · Default

Docker Executor

Execute commands and operations via Docker containers, enabling containerized workload execution within n8n workflows for infrastructure and automation tasks, with the Default resource and operation available for triggering container runs.

• Default · Default

JSONRPC Executor

Execute operations using the JSON-RPC protocol, facilitating remote procedure calls and structured data exchange within workflows, with the Default resource and operation available for protocol-based triggers.

• Default · Default

Kubernetes Executor

Execute commands and operations within Kubernetes clusters, allowing container orchestration and cluster management directly from n8n workflows, with the Default resource and operation available for cluster interaction triggers.

• Default · Default

Runner: Cmd

Run command-line commands for asset and infrastructure operations, providing a flexible execution shell within workflows for ad-hoc or scripted tasks, with the Default resource and operation available for command triggers.

• Default · Default

Runner: Dns

Interact with DNS services for asset and network resolution, supporting domain and record lookups as part of asset enumeration and reconnaissance workflows, with the Default resource and operation available for DNS interaction triggers.

• Default · Default

Runner: Httpx

Interact with HTTP services for asset probing and connectivity checks, enabling HTTP request execution and response analysis for web-based asset assessment, with the Default resource and operation available for HTTP interaction triggers.

• Default · Default

Runner: IcpLookup

Lookup ICP information for identified assets, supporting industrial control protocol identification within asset management and security workflows, with the Default resource and operation available for ICP lookup triggers.

• Default · Default

Runner: Masscan

Interact with Masscan for fast port scanning of assets, enabling rapid network discovery and open port identification as part of security assessment workflows, with the Default resource and operation available for scanning triggers.

• Default · Default

Runner: Naabu

• Default · Default

Runner: Nuclei

Interact with Nuclei for template-based vulnerability scanning, allowing pattern-matched security checks against assets using community and custom templates, with the Default resource and operation available for scanning triggers.

• Default · Default

Runner: Subfinder

Interact with Subfinder for subdomain discovery of assets, supporting expanded asset surface identification through passive and active reconnaissance methods, with the Default resource and operation available for discovery triggers.

• Default · Default

Priority Modify

Modify the priority of runner executions within workflows, allowing reordering or weighting of subsequent node operations based on defined priority rules, with the Default resource and operation available for priority adjustment triggers.

• Default · Default

Runner: Unauthor

Interact with Unauthor to detect unauthorized access to assets, identifying security gaps and unexpected access patterns as part of asset protection and compliance workflows, with the Default resource and operation available for authorization checks.

• Default · Default

Memorizer: Redis

Remember and store data in Redis within workflows, providing a persistent key-value store for state tracking, caching, or data passing between nodes, with the Default resource and operation available for Redis interaction triggers.

• Default · Default

Runner Fofa

Interact with Fofa for asset searching and threat intelligence, leveraging mass scanning and query capabilities to locate assets and gather security context, with the Default resource and operation available for Fofa-based search triggers.

• Default · Default

Empty Check

Check if the previous node in a workflow returned an empty result, enabling conditional branching based on data presence or absence to control flow logic, with the Default resource and operation available for result evaluation triggers.

• Default · Default

Vulbox

Interact with Vulbox to manage vulnerabilities, assets, and VPN information, supporting listing and submission operations across multiple resource categories such as tasks, vulnerabilities, businesses, and VPN entries, with the listed resource-operation pairs available for Vulbox integration triggers.

• Default · List
• Default · Submit
• Task · List
• Task · Submit
• Vulnerability · List
• Vulnerability · Submit
• Business · List
• Business · Submit
• VPN · List
• VPN · Submit

Installation

Install as an n8n community node: in n8n, open Settings → Community nodes → Install and enter n8n-nodes-soar. See the n8n community nodes installation guide.