node.js

Command Injection

`whoami`

Use `` to execute command, otherwise it will not work.

Stuck:

• There might be something encoded in base64, decode it. (cookie)

Check:

strings <name>

Node JS attack

• Node JS cookie deserialization attack