rapid7/metasploit-framework — pull request #1489 by sempervictus (2013-02-14 02:29:41+00:00)
Title: Add javascript based reverse_ssl payloads

This commit adds two of the same javascript reverse tcp ssl shell
modules, one for unix/cmd, one for javascript raw. No forking is
required to let this run in the context of another JS application.

If you can get Node to process your code, you can get a reasonably
secure egress method since most installations have 'tls' and can
spawn a shell.

If anyone with more Node.js experience could point me toward a neat
conditional for spawning cmd on a windows system this would be
platform agnostic and feature complete IMO.