Exploiting Insecure Deserialization: Node-Serialize

Quick demo on how to exploit deserialization vulnerabilities using the Celestial machine from HTB:
Blog Post: TBA
SOCIALS📱
=========
Checkout my newsletter: www.navigating...
Recommended Courses:
PNPT Voucher: academy.tcm-se...
PEH Course: academy.tcm-se...
Python 101: academy.tcm-se...
Windows Priv Esc Course: academy.tcm-se...
Linux Priv Esc Course: academy.tcm-se...

[@apristen]

thank you very much bro for "opening my eyes" and fresh idea of attack vector!
previously I missed idea (shame🤦🏻‍♂) that cookies and other similar stuff in base64 with JSON inside are... also processed by nodejs!

[@aqeebhussain9032]

Brother, your explanations are fantastic! I can see you have a great understanding of deserialisation. Please keep your videos going, it’d be great to learn more from you. And of course, best wishes with your OSWE. You got this!

[@tadii]

I appreciate that! More to come hopefully

[@apristen]

7:47 - "Unexpected token " - it seems it expects token "" ! 🤣🤣🤣

[@apristen]

Sorry, but I still can't understand how code executed from JSON's string parameter?
I didn't see eval() anywhere in the code (usually, in real life, in real sites nodejs backend codes) which process JSON input string fields 🙂

[@huuloc8719]

good luck on your OSWE

[@tadii]

i appreciate that

[@ogbooker4538]

stay consistent please bro

[@tadii]

i'll try lol, work it kicking my ass

[@likimbi]

Can i start my cyber security journey (CCNA) with this one..Lenovo ThinkPad T470s Core i7-6600U 16GB 256GB SSD 1920x1080 IPS Backlit WWAN ..thank you

[@PetranEVO]

Yes.

[@tadii]

yes