nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

nodexp

NodeXP - Node.js 服务的检测与利用工具！ NodeXP 是一个集成化工具，基于 SSJI （服务端 JavaScript 注入）攻击，使用 Python 2.7 编写，能够自动检测 Node.js 服务上的潜在漏洞并进行利用。 入门 - 安装与使用 通过克隆 Git 仓库下载 NodeXP： root@kitploit: git clone https://github.com/esmog/nodexp 要查看所有选项列表，运行： root@kitploit: python2.7 nodexp -h 分别针对 POST 和 GET 情况的示例： root@kitploit...

SSJI-to Node. js vulnerability audit of the series a-vulnerability warning-the black bar safety net

hello I was in control of the security laboratory of the Whispering Wind, the JavaScript in Node. js with the help of turned into a server-side scripting language, so since it is a service side scripting language, there may be some security issues. SSJIserver side JavaScript injection is a...