JS Sandbox: vm2 Custom Inspect Escape (CVE-2023-37903)

Bookmarked!

This exercise covers exploiting Node.js's custom inspect hook to leak the host's util.inspect function out of a vm2 sandbox and escape.

Course

This exercise covers exploiting Node.js's custom inspect hook to leak the host's util.inspect function out of a vm2 sandbox and escape.

Ready to practice?

Get access to this lab and 600+ hands-on exercises with a PRO subscription.