5 ms·
It's really incredible what it can do. I once used it to demo a vulnerability on a client's website using NodeRed that I could trigger from my phone. Basicall
by geek_at 5y ago
It's really incredible what it can do.
I once used it to demo a vulnerability on a client's website using NodeRed that I could trigger from my phone.
Basically I made NodeRed spit out a JS file which I enbedded on their site using the vulnerability and could trigger the content of the js from my phone
Felt so movie hacking-like. Website looked normal until I flipped a switch on my phone, now all images are replaced by kittens
- ronyeh 5y agoWow my mind is blown. Can you provide a sketch of how you did it so I can learn from this experience? Was the vulnerability due to uploading files? What workflow did you use to deploy straight from your phone?