9987 shaares
262 private links
262 private links
Here we go again. A small package is
is abused.
The transcription makes it clear how it works:
- Expose node's require with a
get "switch"() { return require; }
- Load
os
andws
modules fromthis['switch']
- Connect to the websocket
new Function(data)(); // remote code execution
of a WebSocket message.