Tag json

Security

eXtreme Vulnerable Node Application (XVNA) – Insecure nodejs deserialization

In this post we’ll have a look at the nodejs deserialization attack/exploit in XVNA (eXtreme Vulnerable Node Application). Insecure deserialization is part of the OWASP Top 10 list that was published in 2017. We’ll use the setup detailed here (XVNA…

malwrforensics
March 17, 2018

Security

Step by step environment setup for Extreme Vulnerable Node Application (XVNA) security testing

Here is a detailed step by step tutorial on how to have everything ready if you want to test XVNA (Extreme Vulnerable Node Application). Base OS: Ubuntu 16.04 First, we need to install mongodb, nodejs and git: apt-get install monodb…

malwrforensics
March 16, 2018