How to hack a node app?
summary
Five real breach stories with concrete takeaways: known vulnerabilities do most damage (Equifax ~200 million records exposed because a two‑month‑old Apache Struts patch wasn’t applied), widely available tools automate attacks (AutoSploit + Shodan, Metasploit), dependency scanners that catch bad packages actually help (NSP and GitHub dependency graph), SQLi and protocol‑smuggling chains demonstrate assembler exploits (memcache + webhooks), and npm typo‑squatting npm module publishes a setup script that exfiltrates env vars.
AI-written summary · about
chapters (16)
- 0:00Intro
- 6:00Stupid mistake
- 6:50Equifax hack
- 8:00Zero day exploit
- 12:20How to protect yourself
- 14:50How to hack someone
- 17:30Companies House
- 19:40Sequel
- 21:20Moral of the story
- 22:50Bug bounty
- 24:00Webhooks
- 25:10HTTP Post
- 26:20Graphite
- 29:00HTTP
- 32:20Memcache
- 37:10OhWASP
