How to hack an Angular app?
summary
Three concrete stories: a GitHub webhook→localhost→0 bypass chains into Elasticsearch (port 9200) shutdown then into Graphite and protocol smuggling to memcache, allowing unsafe deserialization to execute commands; Equifax leaks ~200 million records via a known Apache Struts vuln that was patched two months earlier (not a zero‑day); and a typosquatting npm package silently typosquatting npm package exfiltrates ENV during npm install. Tools shown: curl/HTTP libs, memcached protocol tricks, exploit DB/Metasploit searches; numbers: 200M records, ~77% vulnerable JS usage.
AI-written summary · about
chapters (28)
- 0:00Introduction
- 7:35Elastic Search
- 14:56Memcache
- 17:41Webhook URL
- 20:01Smaller exploits
- 22:16Zeroday exploit
- 22:46Public domain exploit
- 23:16Zeroday exploits
- 23:56How to get an exploit
- 24:56Who hack
- 25:21Automated tools
- 26:56Known vulnerabilities
- 27:56Angular Documentation
- 28:26Migration
- 28:56Security Patch
- 29:16GitHub Insights
- 30:16Summary
- 30:46Side notes
- 31:56What we did
- 32:56What does it do
- 33:26Post to server
- 34:16Node module
- 34:56Crossnames package
- 35:56Youre just doing it
- 36:26The moral of stories
- 36:56Open source
- 37:26Package name
- 38:11Conclusion
