Post

Hacker Sidekick has once again autonomously exploited a critical vulnerability in popular software, this time a Remote Code Execution vulnerability in n8n, the workflow automation platform that thousands of companies run in production. One prompt. Video and blog: hackersidekick.com/hacker-sidek...

The attack: send application/json to a Form Trigger endpoint instead of multipart/form-data. The handler writes the attacker-controlled files object directly into the request body. Point filepath at /etc/passwd. The workflow execution data returns the contents base64-encoded.

What makes this demo different from most AI showcases: it shows the failures. The wrong API endpoints. Reading the n8n source code inside the Docker container to figure out why. Multiple iterations before the exploit works. The AI handles the tedious parts so you can focus on the important parts.