Update and rename node-integration.yaml to node-integration-enabled.yaml

patch-1
Prince Chaddha 2021-10-04 18:17:45 +05:30 committed by GitHub
parent 12ab5cfad3
commit 10c6db887c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -4,10 +4,11 @@ info:
name: Node Integration Enabled
author: me9187
severity: critical
tags: electron,file
reference: https://blog.yeswehack.com/yeswerhackers/exploitation/pentesting-electron-applications/
reference:
- https://blog.yeswehack.com/yeswerhackers/exploitation/pentesting-electron-applications/
- https://book.hacktricks.xyz/pentesting/pentesting-web/xss-to-rce-electron-desktop-apps
tags: electron,file,nodejs
# nodeIntegration in Electron Applications means you can turn XSS into RCE by calling require('child_process').exec('COMMAND');
# https://book.hacktricks.xyz/pentesting/pentesting-web/xss-to-rce-electron-desktop-apps
file:
- extensions: