Node.js Security: Pentesting and Exploitation - Overview | StackSkills

Autoplay
Autocomplete

Previous Lesson Complete and Continue

Node.js Security: Pentesting and Exploitation

Introduction

Node.js Security: Pentesting and Exploitation - Overview (1:37)
Introduction to Node.js (1:58)

Node.js Security Issues

Global Namespace Pollution (4:45)
HTTP Parameter Pollution (HPP) (4:51)
Remote Code Execution with eval() (6:00)
Remote OS Command Execution (4:11)
Attacks due to Untrusted user input (7:20)
Regex DoS (4:00)

Information Disclosure

Information Disclosure in Node.js Web Applications (3:20)

Secure Coding

Lack of Secure Code in Node.js (1:52)

Code Review

How to do Code Review of a Node.js Application (3:22)

Automated Code Review

Automated Code Review of Node.js Application with NodeJsScan (6:20)

Conclusion

Conclusion (0:55)
Presentation PDF

Node.js Security: Pentesting and Exploitation - Overview

Complete and Continue