kylew1004/cve-2017-5941-poc-docker-labProof-of-concept lab for CVE-2017-5941 node-serialize untrusted deserialization RCE. Includes POST and cookie-based exploit vectors with Docker environment for authorized testing.
⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test.
This repository provides:
node-serialize <= 0.0.4./api/deserialize (default)profile for /profile (Base64-encoded; server must decode before unserialize())node-serialize (≤ 0.0.4)unserialize(), any string value that begins with "_$$ND_FUNC$$_" is treated as executable JavaScript (evaluated).unserialize(), it leads to Remote Code Execution.Example of a malicious value:
{ "p": "_$$ND_FUNC$$_function(){ require('child_process').exec('id') }()" }