UDEMY_NODE_JS_SECURITY_PENTESTING_AND_EXPLOITATION_TUTORIAL-kEISO

Section

Appz

Group

kEISO

Size

205,76 MB

Files

7

Date

2015-06-29

NFO

                                                   █▀▀▀▀
                                                   ▓ ████████ ░
                                                   ░ ████████ ▓
                                           █▀▀▀      ████████ ▀▀▀▀  ▀▀▓
                                           ▓ ███████████▓████████████ ▒
            ████████ ▄                     ░ ██████████▓▒▓███████████ ░
            ████████ █▓▄              ▄▓█▄▄  ████████▓▀ ░ ▀▀▀▓███████
 ████████▌▄ ████████ ▀▀▀▀           ▄▓███████ ░ ▄▄▄▄ ▄█▄ ▄██▄ ▓▄▄ ▄   ████████
 ▀▀▀█████▌█ ██████████████▄       ▄▓███████▀▄▄     ▓▐████████ ░       ████████
  ███████▌█ █████████████▌█▓▄   ▄▓█████████████▓▄▄ ░ ▀█████▀ ▐▄▄█████▌████████
  ███████▌ ▄████████▓████▌█▀▀▀    ▀▀████████████████▄█▄▀█▀ ▄▌░███████▌████████
███████▓▀▄████████▓▀▄████ █ ████████▄▄█▀████████████████ ▄██▌▓████████████████
▓█████▄█████████▀ ▓██████ ▀ █████▄ ▐██████▌▀▓████████▓██████▌▀██████████▀▀▀▀▀▀
  ▀▀▓████████▓▀   ████████▄ ███████▐██████▌   ▀██████▀███████ ▄▀██▓████▄ ▀██▀
  ▐▄▄ ▀▀▓███████▄▄█▀▀▓██████▄▄▐▀▓██▐███████  ▄████▓▀  ███████ ▓  ▀░██████▄▀
  ▐███░▄▄ ▐████████ ░░ ▀▀▓█████████ ███████▄██▓██▀    ▀▀█████ ░    ▀▀▓████░▄
▄▄▄▄▄█▓██ ▐████████▄▄▄▄▄▄▄ ▀▀██████ ▀▀█▀███▀▀███▄  ▄▐████████▌▄▄▄░████████▓██
▐████████ ▓███████▓██████▓  ██▄▓███████████▌██████▄▀ ████████▌███▒████▀▀▀
 ████████ ▓█████▄▄ ▄▄████▌  █████▐█████████▌████████▄████████▓███▓████  ███████
 ███▀▀▀▀▀▐███  ███ ██████████████ █████████▌ ▀██▓█████▀▀▀    ▐███████▌  ███████
  ▄▄████ ▐█      █▄▄▄▄▄▄ ▀▀▀▀▀▓██ ███▌▀▀▀ ▄▄█▄ ▀░███████▄ ▄██████████▓███████▀▀
   ▀▓▀▀▀ ▐███░ ███████▌▐▀█████▄▄▄▄▀▄▄▄██▀ ▀▓███▄ ▀███████████▌▐█▄▄▀▀▀▀▀▀▀█████
         ▓███  ███████▌██▄▀▀▀▀▓████▄▀▓██ ▓  ▀▓███▄ ▀▀████████▌▓█████████▄▄▄▄▄
         ▀▀▀▀▀▀▀▀▀▐ ██ ███          ▀▀  ▓█▓   ▀▀▀  ▄██████████     ▀▀▀▀▓███▀
          ▀▓█▀▀▀▀▀▀▀▀▀▀███       ░░ ▀▀█▓█████▀▀▄▄▓▄▄ ▀▀███████ ▓▄▄
            ▀ ████████ ▀▀▀    ▄▄▄▓▓▌  ▄██▀██▄    ▀▀▓██▄  ▀▀███ ████▓▄
           ▄▄▄████████▄▄▄▄▓▓█████▀▀  ▐▓▀ █▄▀▓█       ▀ ▄██▄▄ ▀ ▀█▀███▌
  ░▄▄▄▄██████▀██████▓██████████████  ▀ ▄████▄██▄▄▄▓██ ██████▀   ▄█████ ███▄▄▄▄▄
██▓█████▓███████████░▓█████████████ ▐████████████████░█████▌  ▄▓██▀███▌████████
▓███████░██████████████████  █▓▓▀▀▀ ▐██████▓███▌█████▓█████ ▄███▀▐████▌███████▌
░▓█████▀ ███▀▀▀█████▌▀▓█████▄   ▄▓█ ▐██████▒███████▀▀▀▐██████▓▀  ▐████▌█████▄
 ▀██████▄   ▄▓▐██████▄ ▀▓██████ █▀▀ ███████░▀███████▄ ░█████▀▄  ▄████▓███████▌
   ▀▓██████ ▀▀▐█████▓▓ ▄▄██████   ▄ ███████▄▐▄▀██████▓▓▄███▄█████████░███████▌
   ▄▄██████   ▄█████████████▌   ███▄▄███████    ▀▓███ ▄▄▄▄▄▄▄▄ ▀▀██▓▀ ███████
░███████▌   █████▐███████████  ▐████████████████   ▐█ █████████▓▄▄   ▐███████
 ▌▄▄█████  ▐█████▐█████▐██████▄█████▄███████▀███▌  ██ ▀▀░▓█████████▓▄▐███████
  ▐███████▄█████▌▐█████ ▀█████████ █▀███████▓████▄██████▓████████████████████
   ▀▓█████████▓▀▄██████ █▄▄▀▀██▓▀▀  ▓▄▀█████▀▓████████▐███████▀▓█████▀▀▀████▌
      ▀▀▓░░▀▀▄▄███████  ▀ ▄▄▄▄█████ ▄▀█▄▀███▐▄ ▀▀░░▓▀▀▐███████ ▄▄▀▀   ░▄  ▀█▌
     ▄▀ ▄ ▀▄   ████████████████▓███ ██ ▓█▄▄█ ▀██▄▄▄██▀▄▄▄▄▄▄▄▄ ██▀ ▄▀ ▄ ▀▄  ▌
    ▐▌ ■░■ ▐▌  ████████████████████ ███ ▀▓██   ▀▀▓▀▀▄██████▓▀   ▀ ▐▌ ■░■ ▐▌
     ▀▄ ■ ▄▀   ███████▓▓▀▀▀▀▀▓▓▄▄▄▄       ▀▓       ▀▀▀▀▀▀▀▀        ▀▄ ■ ▄▀
  ▄ ▀ ▐ ▓ ▌ ▀ ▄  ▄▄▄▄▄███████████▀ ▄■▀▀▀▀▀■▄                    ▄ ▀ ▐ ▓ ▌ ▀ ▄
 ■    ▐ ▒ ▌    ■  ▀████▓▓▓░░░▀▀▀ ▄▀  KYRIE  ▀▄                 ■ ▄  ▐ ▒ ▌    ■
▌   ▄▀▐ ░ ▌▀▄   ▐   ▀▀    ▄▄▄▄▄▄▄▌  ELEISON  ▐▄▄▄▄▄▄▄░        ▌  ▀▄▀▐ ░ ▌▀▄   ▐
▀▄ ▄▄▓▐ ░ ▌▓▄▄ ▄▀▀▀▄ ▄▄▓▀▀▀ ▄ ▄ ▄▀▄ ▄▄▀▀▀▄▄ ▄▀▄ ▄ ▄ ▀▀▀▓▄▄ ▄▀▀▀▄ ▀▄▓▐ ░ ▌▓▄▄ ▄▀
  ▐▀▀▀▀▄▀▄▀▀▀▀▐ ▓▀ ▐▌  ▄  ▀  ▄▄▄▄▄▄█▀░   ░▀█▄▄▄▄▄▄  ▀  ▄  ▐▌ ▀▓ ▌ ▀▀▀▄▀▄▀▀▀▀▌
▄  ▀▀▀▓ ▀  ▀▀▀ ▀▄▄▄▀  ▓██ █▓▀▀     ▀▌▄   ▄▐▀     ▀▀▓█ ██▓  ▀▄▄▄▀ ▐▀▀  ▀ ▓▀▀▀  ▄
█▄   ▀▐  ▄██▄   ▄  ▄▄█▀              ▀▀▀▀▀              ▀█▄▄  ▄  ▄▄██▄  ▌▀   ▄█
▓█▓▄    █▄▀▀█▌ ▄ ▄█▓▀                                     ▀▓█▄ ▄ ▀█▀▀▄█    ▄▓█▓
 ▀▓█▓▄▄▓████▄▄▄██▀▀           RELEASE INFORMATION           ▀▀██▄ ▄████▓▄▄▓█▓▀
  ▀▓████▀▓█▀ ▀▓▀                                               ▀▓  ▀█▓▀████▓▀
 █ ▀█▓▓██▄▄██    TITLE: Node.js Security: Pentesting and          ██▄▄██▓▓█▀ █
 █▀ ▐█▒▓██░██            Exploitation                             ██░██▓▒█▌ ▀█
 █▀  █▓███▒█▌                                                     ▐█▒███▓█  ▀█
 █▀ ▐█▓███▓█░                                                     ░█▓███▓█▌ ▀█
 █▀ ▐██████▌     PUBLISHER..........: UDEMY                        ▐██████▌ ▀█
 █▀ ▀▀████▓      LINK...............: http://is.gd/0X8BxU           ▓████▀▀ ▀█
 ▌ ▓██▌▄ ▀▀      AUTHOR.............: Ajin Abraham                  ▀▀ ▄▐██▓ ▐
 ▌▐███░▒███▌     LEVEL..............: all level                    ▐███▒░███▌▐
 ▌ ████▓████     RUNTIME............: 1 hour                       ████▓████ ▐
 █ ▐▓█▀█████░    LANGUAGE...........: ENGLISH                     ░█████▀█▓▌ █
 █▀ ▀▄█▄▄▀▀█▓    RELEASE TYPE.......: RETAIL                      ▓█▀▀▄▄█▄▀ ▀█
 █▀▄ ▄▀███▓▄     RELEASE FORMAT.....: ISO                          ▄▓███▀▄ ▄▀█
 █▀█ ▐▓▄▀████    STORE DATE:........: 2015.03.18                  ████▀▄▓▌ █▀█
 █▀█ ▐█▌▓██▓     RELEASE DATE.......: 2015.06.29                   ▓██▓▐█▌ █▀█
 ▓▀█ ▓▌░██▓      ISO SIZE...........: 215,734,272                   ▓██░▐▓ █▀▓
 ▒▀█ █ ▓█▓       ISO CHECKSUM.......: D60EFCCE                       ▓█▓ █ █▀▒
 ░ █ ▌░██        DISKCOUNT..........: 5 * 50MB                        ██░▐ █ ░
   ▓█▌▓█▌        SAVED MONEY........: YOU DID!                          ▐█▓▐█▓
 ░ ▒█▐██         DISKNAME...........: keiso_unspe                      ██▌█▒ ░
   ░▀ ▀                                                                   ▀ ▀░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██  ▄▄▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄ ▀ ▀█▌▐▓▀         TUTORIAL          ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄█▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓  ▄ █▀▀                                                   ▀▀█ ▄  ▓▄ █▀█
 █▀█ ▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄ █▀█
 █▀█ █▓ ▄▓▄▀ Node.js« is a platform built on Chrome's JavaScript  ▀▄▓▄ ▓█ █▀█
 █▀█ ▓▒  ▒  runtime for easily building fast, scalable network       ▒  ▒▓ █▀█
 █▀█ ▒░  ░  applications. This new technology is widely getting      ░  ░▒ █▀█
 ▓▀█ ▒░  adopted in various organisations. Like any                     ░▒ █▀▓
 ▒▀█ ░▓  platform, Node.js has it's on set of features that             ▓░ █▀▒
 ░ █  ▒  developers blindly use without much thought on                 ▒  █ ░
   ▓  ░  security. The heart of Node is JavaScript, so it               ░  ▓
 ░ ▒  ░  inherits most of the issues that are found at client side      ░  ▒ ░
   ░  JavaScript. However on the server side, it executes on V8         ░
   ░  JavaScript engine which gives node the capabilities similar to    ░
   ░  that of any other server side scripting languages. That           ░
   ░  difference adds some unique attack surface to Node.js             ░
   ░  platform. Node.js Security: Pentesting & Exploitation course is   ░
   ░  one it's kind to teach about Node.js Security.                    ░
   ░                                                                    ░
   ░ This course is designed in such a way to address                   ░
   ░  both the requirements of a Web Developer as well as               ░
   ░  a Web Pentester. For a Web Developer, he will get                 ░
   ░  to know about secure coding, what all things can                  ░
   ░  make his code insecure and how to identify                        ░
   ░  security issues in his code. For the Web Security                 ░
   ░  guy, it gives him an idea on how he should go with                ░
   ░  securing Node.js Application by performing effective              ░
   ░  Code Review, Implementing Secure Code, Pentesting, Automating     ░
   ░  the process of Code Review and finally exploiting the             ░
   ░  vulnerabilities identified.                                       ░
   ░                                                                    ░
   ░ As a take away, this course will introduce an open source          ░
   ░  Node.js Security Analysis tool named NodeJsScan, a Node.js Static ░
   ░  Analysis Tool that can detect possible security issues,           ░
   ░  insecure code and outdated libraries. This tool allows you to     ░
   ░  extend the scan using it's customisable rule set.                 ░
   ░  You can add your own rules on the go to catch                     ░
   ░  security issues.                                                  ░
   ░                                                                    ░
   ░ Finally this course is one of it's kind with hands                 ░
   ░  on demonstration and walkthrough on identifying                   ░
   ░  security issues, exploiting and fixing them.                      ░
   ░                                                                    ░
   ░ The course will cover the following thing                          ░
   ░                                                                    ░
   ░ ò Introduction                                                   ░
   ░                                                                    ░
   ░ ò Node Specific Security Issues                                  ░
   ░                                                                    ░
   ░ ò Global Namespace Pollution                                     ░
   ░                                                                    ░
   ░ ò HTTP Parameter Pollution (HPP)                                 ░
   ░                                                                    ░
   ░ ò eval() is Evil                                                 ░
   ░                                                                    ░
   ░ ò Remote OS Command Execution                                    ░
   ░                                                                    ░
   ░ ò Untrusted User Input                                           ░
   ░                                                                    ░
   ░ ò Regex DoS                                                      ░
   ░                                                                    ░
   ░ ò Information Disclosure                                         ░
   ░                                                                    ░
   ░ ò Lack of Secure Code                                            ░
   ░                                                                    ░
   ░ ò Code Review                                                    ░
   ░                                                                    ░
   ░ ò Automated Code Review with NodeJsScan                          ░
   ░                                                                    ░
   ░                                                                    ░
   ░                                                                    ░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██  ▄▄▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄ ▀ ▀█▌▐▓▀       NOTES / NEWS        ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄█▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓  ▄ █▀▀                                                   ▀▀█ ▄  ▓▄ █▀█
 █▀█ ▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄ █▀█
 █▀█ █▓ ▄▓▄▀                                                       ▀▄▓▄ ▓█ █▀█
 █▀█ ▓▒  ▒               Huh? No news are good news!                 ▒  ▒▓ █▀█
 █▀█ ▒░  ░                                                           ░  ░▒ █▀█
 ▓▀█ ▒░                                                                 ░▒ █▀▓
 ▒▀█ ░▓                                                                 ▓░ █▀▒
 ░ █  ▒                                                                 ▒  █ ░
   ▓  ░                                                                 ░  ▓
 ░ ▒  ░                                                                 ░  ▒ ░
   ░                                                                    ░
 ░                                                                           ░
 ░▄░ ░       ██           ▄▄▄▄▄▓█▀█▀ ▀ ░ ▀ ▀█▀█▓▄▄▄▄▄           ██       ░ ░▄░
 ▒▄▒ ▓░   ████████  ▄▄▓█▌▀▀█▄▄▀▀               ▀▀▄▄█▀▀▐█▓▄▄  ████████   ░▓ ▒▄▒
▌▓▄▓▀ ▀▀▄    ██    ▐██▀ ▄██▀                       ▀██▄ ▀██▌▄▄  ██    ▄▀▀ ▀▓▄▓▐
█▀  ▓░  ▄ █▄▌██ ▄░  ▀█▌▐▓▀          RESPECTS         ▀▓▌▐█▀ ▀ ▄ ██▐▄█ ▄  ░▓  ▀█
 ▄▀ ▄ ▀▄   ▀▌▓█   ▀▄▄ ▀ ▀▄                           ▄▀ ▀ ▄▄▀   █▓▐▀   ▄▀ ▄ ▀▄
▐▌ ■░■ ▐▌  ▄▌░▓   ▄██   ▀  ▓                       ▓  ▀   ██▄   ▓░▐▄  ▐▌ ■░■ ▐▌
 ▀▄ ■ ▄▀ ▀▀▀▀ ▄▄▓▀▀▀           ▀      ▀ ▀      ▀           ▀▀▀█▄▄ ▀▀▀▀ ▀▄ ■ ▄▀
 █▀█ ▄▓▄ ▄▄█▀▀▀                                                  ▀▀█ ▄ ▄▓▄ █▀█
 ▌ ▐▄▄▓  ▄ ▐▌                                                     ▐▌ ▄  ▓▄▄▌ ▐
 ▌  ▀█▓ ▄▓▄▀       BBL - DDU - EEn - iNTENSiTY - JGT - RBS         ▀▄▓▄ ▓█▀  ▐
 ▌░   ▓  █                                                           █  ▓   ░▐
 ▌▒   ▒▄█▀                                                           ▀█▄▒   ▒▐
 ▌▓▌  ░                                                                 ░  ▐▓▐
 ▌██  ░                            SHOUTOUTS                            ░  ██▐
 ▌▐▓█                                                                     █▓▌▐
 ▌ ░▓█                                                                   █▓░ ▐
 █  ░██                                                                 ██░  █
 █▀▄ ▓██▄         DVT - FONT - iRONiSO - LAXiTY - PARADOX - SO        ▄██▓ ▄▀█
 █▀ ▄ ▓███▄                                                         ▄███▓ ▄ ▀█
 █▀  █▄▀▓█▀██▄                         ▓                         ▄██▀█▓▀▄█  ▀█
 █▀ ▀ ▀█▄▀▓█▄▀▀▓▄▄                  ▄▀ ▄ ▀▄                  ▄▄▓▀▀▄█▓▀▄█▀ ▀ ▀█
 █▀▄ ▀▄▀██▄▀▀█▄  ▀▀▓▄▄        ░  ▄▌▐▌ ■░■ ▐▌▐▄  ░        ▄▄▓▀▀  ▄█▀▀▄██▀▄▀ ▄▀█
 █▀█ ▄ ▀▄▀███▄▀▀█▄▄  ▀▀▓▄  ▄▄▄▓▓█▀  ▀▄ ■ ▄▀  ▀█▓▓▄▄▄  ▄▓▀▀  ▄▄█▀▀▄███▀▄▀ ▄ █▀█
 █▀█ █  ▀█▄▀█▄▀█▄▀▀█▄   █▓  ▀█ ▄ ▄ ▀ ▐ ▓ ▌ ▀ ▄ ▄ █▀  ▓█   ▄█▀▀▄█▀▄█▀▄█▀  █ █▀█
 █▀█ █ █  ▀█▄▀█ ▀██▄▀█▄ ▐█▓░  ▀ ■    ▐ ▒ ▌    ■ ▀  ░▓█▌ ▄█▀▄██▀ █▀▄█▀  █ █ █▀█
 █▀█ █ █ ▐▌▐██▐█▄ ▓██▐█▌██░   ░▌   ▄▀▐ ░ ▌▀▄   ▐░   ░██▐█▌██▓ ▄█▌██▌▐▌ █ █ █▀█
  ▀█ ▀████ ██▀████▐████▓▀   ▄▀▀▀▄ ▄▄▓▐ ░ ▌▓▄▄ ▄▀▀▀▄   ▀▓████▌████▀██ ████▀ █▀
   ▀█▄  ▀▀▀████▓▀▄█▓▀▀     ▐▌ ▀▓ ▌▀▀▀▀▄▀▄▀▀▀▀▐ ▓▀ ▐▌     ▀▀▓█▄▀▓████▀▀▀  ▄█▀
      ▀ ▄▄    ▀▀▀▀▀▀▀   ▄▌  ▀▄▄▄▀ ▀▀▀▄ ▀ ▄▀▀▀ ▀▄▄▄▀  ▐▄   ▀████▀▀ ▄▄ ▄▄ ▀
          ▀▀█▄▄▄▄▄▄▄▄▄████▄    ▄  ██▌▐ █ ▌▐██  ▄    ▄████▄▀        ▀▄▄
                ▀▀▀▀▀▀▀▀██▓▓░░  ▄  ▀ ▐ ▓ ▌ ▀  ▄  ░░▓▓██▀▀▄ H7/BREAK ▄▀
                         ▄▀ ▄ ▀▄  ▓ ▄▐ ▒ ▌▄ ▓  ▄▀ ▄ ▀▄    ▀▐▄    ▄▌▀
                        ▐▌ ▌ ▐ ▐▌ ░  ▐ ░ ▌  ░ ▐▌ ▌ ▐ ▐▌
                         ▀▄ ▀ ▄▀▄▄   █ ░ █   ▄▄▀▄ ▀ ▄▀
                           ▀▀▀ █  █  █ ░ █  █  █ ▀▀▀
                                ▀▀  ▐▐ ░ ▌▌  ▀▀
                                    █▐ ░ ▌█
                                   ▀▄▐ ░ ▌▄▀
                                     ▐ ▒ ▌
                                     ▐ ▓ ▌
                                    ▄▀ ■ ▀▄
                                   ▐▌ ■░■ ▐▌
                                    ▀▄ ▀ ▄▀
                                      ▀░▀

Files