Update and rename node-integration.yaml to node-integration-enabled.yaml
parent
12ab5cfad3
commit
10c6db887c
|
@ -4,10 +4,11 @@ info:
|
|||
name: Node Integration Enabled
|
||||
author: me9187
|
||||
severity: critical
|
||||
tags: electron,file
|
||||
reference: https://blog.yeswehack.com/yeswerhackers/exploitation/pentesting-electron-applications/
|
||||
reference:
|
||||
- https://blog.yeswehack.com/yeswerhackers/exploitation/pentesting-electron-applications/
|
||||
- https://book.hacktricks.xyz/pentesting/pentesting-web/xss-to-rce-electron-desktop-apps
|
||||
tags: electron,file,nodejs
|
||||
# nodeIntegration in Electron Applications means you can turn XSS into RCE by calling require('child_process').exec('COMMAND');
|
||||
# https://book.hacktricks.xyz/pentesting/pentesting-web/xss-to-rce-electron-desktop-apps
|
||||
|
||||
file:
|
||||
- extensions:
|
Loading…
Reference in New Issue