Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dojo challenge #51 Deadbolt solution

Summary

Dojo challenge #51 Deadbolt solution: with yauzl's decodeStrings:false, a '../pwn.js' ZIP entry escapes the extraction directory and is auto-loaded from the plugin folder, achieving RCE.
Published
Collected

original ↗

Related coverage

back