Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

kenzer

KENZER - Automated web assets enumeration & scanning DEPRECATED Mentions A Conceptual Introduction to Automating Bug Bounties Demo Screenshots Instructions for running 0. Run git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd /home/ubuntu/kenzer preferred 1. Create an...