https://github.com/ContainerSolutions/node-hack

A vulnerable nodejs application for hollywood-style hacking demos
https://github.com/ContainerSolutions/node-hack

Last synced: 4 months ago
JSON representation

A vulnerable nodejs application for hollywood-style hacking demos

• Host: GitHub
• URL: https://github.com/ContainerSolutions/node-hack
• Owner: ContainerSolutions
• Created: 2016-01-22T13:56:34.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2017-03-21T15:35:14.000Z (over 7 years ago)
• Last Synced: 2024-01-16T19:32:09.828Z (6 months ago)
• Language: JavaScript
• Size: 14.6 KB
• Stars: 4
• Watchers: 7
• Forks: 11
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Lists

• awesome-js-resources - hack node app uploading yml
• awesome-js-resources - hack node app uploading yml

README

        
## Vulnerable nodejs app for demos

**WARNING**: *This app deliberately exposes a RCE vulnerability (CVE-2013-4660). It is meant to demonstrate the use of Docker to clean up after a breach and prevent them from happening again in the future.*

#### Build & run:

    $ docker build -t node-hack .

    $ docker run -it --rm -p 1337:1337 --name node-hack node-hack

#### Browse to and demo app:

With docker-machine on OS X

    $ open http://$(docker-machine ip default):1337

- Upload `yaml/nice.yml`, `yaml/broken.yml` and `yaml/evil.yml` for demonstration.

- Browse to start page to see defaced website.

- `Ctrl+c` & re-run container to show the breach casued by `evil.yml` is gone again.

#### Run in read only mode:

To prevent more breaches...

    $ docker run --read-only -it --rm -p 1337:1337 --name node-hack node-hack

Try to upload `evil.yml` again => no breach.

#### Poor mans kill & supervisor scripts:

Use this if you want to demo cases where you can't use `--read-only` (the "supervisor" loop is needed as `--restart=always` does not work with `--rm`)

    $ while :; do test $(docker diff node-hack | wc -l) -gt 0 && docker kill node-hack; sleep 3; done

    # in a different terminal:

    $ while :; do docker run -it --rm -p 1337:1337 --name node-hack node-hack; sleep 2; done

Upload `evil.yml` again => breach is undone after a few seconds.