# nodejs

***

## nodejs debug/inspect RCE

**相关文章**

* [浅析常见Debug调试器的安全隐患](https://security.tencent.com/index.php/blog/msg/137)

**POC | Payload | exp**

* [NodeJS Debugger - Command Injection (Metasploit)](https://www.exploit-db.com/exploits/42793)

***

## 反序列化

**相关文章**

* [Exploiting Node.js deserialization bug for Remote Code Execution](https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/)
* [Deserialization vulnerabilities: attacking deserialization in JS](https://www.acunetix.com/blog/web-security-zone/deserialization-vulnerabilities-attacking-deserialization-in-js/)
