hunt-nodejs

To escalate prototype pollution to RCE in Node.js, you need to test dangerous sinks like child_process or template engines such as EJS. This skill systematically tests these sinks to validate if a pollution primitive can successfully trigger command execution.

Testing for SSTI and command injection in Express and Fastify involves fingerprinting the environment and evaluating template engines and execution sinks. This skill automates that workflow to identify exploitable server-side template injection paths.

You can fingerprint NestJS applications to locate exploitable security primitives by testing environment configurations and framework-specific sinks. This skill targets NestJS to verify if detected vulnerabilities translate into impact-driven RCE.

Prototype pollution interacts with lodash sinks by allowing manipulation of object properties that lodash uses internally, potentially hijacking execution flows. This skill provides structured chaining paths to validate this interaction and achieve RCE.

Systematically testing environment configurations during a Node.js pentest is required to validate the true impact of identified vulnerabilities like SSTI. This skill automates this validation process to ensure primitives reliably escalate into remote code execution.