DEV Community

Discussion on: Gaining remote access to a computer with a reverse shell attack in Node.js

Collapse
 
mehdi_kernel profile image
Kernel 🏴‍☠️

To protect from this kind of attack I use : objective-see.org/products/lulu.html (for mac)
It's an outbound firewall = means that it's a firewall scanning outgoing traffic. This way you can choose what you want to allow and what to disallow (by IP or by application).
For example if you use npm, you can choose to allow node to request data from "npm" when you install things or to allow node to request and send data to your server, and disallow every other IP.
This way, you don't let the attacker "call home".