Automated Exploit Generation for Node.js Packages
summary
Explode.js combines static analysis and lazy symbolic execution plus SMT solving to synthesize concrete exploits that reach vulnerable sinks through multi-call interaction chains. It generates payloads for command injection, code injection, prototype pollution, and path traversal, achieves 46% recall on benchmark datasets (about 3×–5× more exploits than prior tools), and uncovers 44 zero-day vulnerabilities with four assigned CVEs. The pipeline outputs executable templates, solves constraints for concrete inputs, and verifies side effects like created files.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:50Node.js exploit challenges
- 5:00Expo.js capabilities
- 6:28Generated exploit example
- 7:52Expo.js pipeline architecture
- 12:04Expo.js effectiveness
- 14:34Results and contributions
- 15:39Technical details and future work
- 16:23Q&A
related talks
27mNAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications
32mWriting Secure JavaScript Code
23mJavaScript attack surface
36mExploiting Vulnerabilities and Flaws to Attack Supply Chain
31mA Dummy's Guide to Agentic Exploit Generation
40mHow to hack a node app?
24mStrangerDanger: Finding Security Vulnerabilities Before They Find You!
46mHow to hack a node app?