BalCCon - Balkan Computer Congress·34 min
Onuralp Sezer
Provides balCCon2k16 - Onuralp Sezer - NodeJS and electronic world development for N00bs and evaluates key implications for security practitioners.
nodejsbalccon2k16onuralp+2
nodejs
9 talks tagged with this topic.
Filters+
Loading filters…
1–9 of 9 talks · loading…
NorthSec·23 min
Olivier Arteau -
Engineers explore architecture and security mechanisms for Olivier Arteau -- Prototype pollution attacks in NodeJS applications.
nodejsprototype-pollutionolivier+3
Main Stage·46 min
Mikhail Shcherbakov
Advanced JavaScript and TypeScript exploit primitives turning theoretically unexploitable flaws in Kibana into working code execution.
kibanabug-bountyprototype-pollution+2
Main Stage·20 min
Mikhail Shcherbakov · Musard Balliu
Mikhail Shcherbakov and Musard Balliu uncover universal Prototype Pollution gadgets within Node.js core and popular NPM packages, achieving RCE across major applications.
prototype-pollutionnodejsrce+2
geecon conference·51 min
GeeCON 2017: Bruno Bossola - Distributed Systems explained (with NodeJS).
nodejsdistributed-systemsbruno+1
geecon conference·50 min
GeeCON Prague 2017: Bruno Bossola - Distributed Systems explained (with NodeJS).
nodejsdistributed-systemsprague+1
Main Stage·30 min
Feng Xiao
Feng Xiao presents Hidden Property Abusing (HPA), a novel attack vector exploiting internal Node.js runtime properties to achieve arbitrary code execution.
nodejshidden-propertyjavascript+2
Main Stage·31 min
Feng Xiao
Feng Xiao answers audience questions on Hidden Property Abusing (HPA), JavaScript runtime internals, and securing NPM libraries.
nodejshidden-propertyq-and-a+2
Main Stage·38 min
Junyu Zhou
Demonstrates how web security vulnerabilities (XSS, SSRF, path traversal) in Electron desktop applications escalate to full OS code execution.
electrondesktop-appsxss+2