~/talk

Can You Change the Behavior of a Running Node.js Process From the Outside?

Talkat Node Congress 2021 · 2021-02-18..02-19· [nodejs, security]

Demonstrates changing a running Node.js process without code changes by sending SIGUSR1 to enable the debugger, connecting with the Chrome DevTools Protocol via chrome-remote-interface, using runtime.evaluate and queryObjects to find the http.Server instance, and callFunction to wrap its request listeners with a logger. The demo builds an injector script that monkey‑patches listeners to console.log method and url, works live, and shows cleanup and security limits requiring local machine access.

AI-written summary · about

  1. 0:00Start
  2. 2:33Live Demo
  3. 7:37The Devtool Protocol
  4. 9:33Enable the Runtime Domain
  5. 10:09Evaluate an Arbitrary Script on the Remote Node Js Process
  6. 11:02Include Command Line Api
  7. 12:12Query Objects
  8. 14:59Call Function
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.