---
id: 8107
title: "Escape NodeJS Sandboxes"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/escape-nodejs-sandboxes/"
published_at: "2018-11-27T00:00:00Z"
tags: ["sandbox-escape", "reverse-shell", "javascript", "command-injection", "web-pentesting", "nodejs"]
phying_url: "https://phying.com/item/8107"
lang: en
---

# Escape NodeJS Sandboxes

## Summary

Lars Sorenson explores NodeJS sandbox escapes, walking through reverse shell techniques and methods to regain require functionality when sandboxes block module imports, based on interpreter internals.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-11-27T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/escape-nodejs-sandboxes/
- **Phying News:** https://phying.com/item/8107