PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pentesting Electron Applications

yeswehack.com | blog | #bug-bounty | #appsec | #penetration-testing | #electron | #desktop-security | #asar | #electronegativity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A guide to penetration testing Electron apps: understanding the Chromium-plus-Node architecture, unpacking and repacking .asar archives, extracting secrets, and scanning with Electronegativity.
Published
Collected

Related coverage

research · bishopfox.com
Beyond Electron: Attacking Alternative Desktop Application Frameworks
Tauri research: real-world apps chained XSS with permissive settings, such as broad filesystem access and app-launch capabilities, into RCE; Electron alternatives change mechanics, not risk.
blog · yeswehack.com
Is AI pentesting safe?
YesWeHack examines three key AI pentesting concerns - scope control, harm avoidance, and traceability - and shows how its Agentic Pentest harness addresses them for safe autonomous testing.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · blog.trailofbits.com
Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more
Trail of Bits details Electron CVE-2025-55305: overwriting V8 heap snapshot files bypasses code integrity checks, enabling local backdoors in Signal, 1Password, Slack, and other Chromium-based apps.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · blog.trailofbits.com
Escaping well-configured VSCode extensions (for profit)
Part two of the series: bypassing a Webview's localResourceRoots via URL parsing differences in VSCode's Electron browser to read arbitrary files; fixed as CVE-2022-41042 with a $7,500 bounty.
Back