You can actually get access to require using this bug: cos.constructor("return p... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tbodt on April 2, 2017 | parent | context | favorite | on: How we exploited a code execution vulnerability in...

You can actually get access to require using this bug: cos.constructor("return process.mainModule.require")()

CapacitorSet on April 2, 2017 [–]

Oh well, that would have been so much easier. Thank you!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact