Tag owasp

Security

eXtreme Vulnerable Node Application (XVNA) – reflected cross-site scripting (XSS) step by step tutorial

In this post we’ll have a look at the nodejs XSS attack/exploit in XVNA (eXtreme Vulnerable Node Application). Cross-site scripting is part of the OWASP Top 10 list that was published in 2017. We’ll use the setup detailed here (XVNA runs on port 80).…

malwrforensics
April 1, 2018

Security

eXtreme Vulnerable Node Application (XVNA) – Insecure nodejs deserialization

In this post we’ll have a look at the nodejs deserialization attack/exploit in XVNA (eXtreme Vulnerable Node Application). Insecure deserialization is part of the OWASP Top 10 list that was published in 2017. We’ll use the setup detailed here (XVNA…

malwrforensics
March 17, 2018