Paul's Security Weekly Subscribe

Exploiting Client-Side Node.js with Moses Hernandez – Paul’s Security Weekly #516

June 2, 2017

I know what you're thinking, Node.js is server-side right? Not exactly. It turns out many client-side applications have embedded Node.js. And its not always updated to the latest version. And, its vulnerable to attacks! Moses Hernandez is a Consulting Systems Engineer for Cisco Systems and an Instructor for pen testing courses at the SANS Institute. Moses shows us how to find Node.js on a system, locate the different versions, and exploit to bypass UAC! Full Show Notes: https://wiki.securityweekly.com/Episode516 Subscribe to YouTube Channel: https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg Security Weekly Website: http://securityweekly.com Follow us on Twitter: @securityweekly

Full episode and show notes

Related

The Future in the Age of AI – SWN Vault

December 31, 2024

Our old friend Russ Beauchemin and Doug talk about the future of AI and what it may mean when AI is smarter than us all.

Cloud Security in Higher Education: Balancing Trust and Risk – Sheena Thomas – CSP #207

December 31, 2024

In this episode of CISO Stories, Jess Hoffman and Sheena Thomas explore the challenges of cloud security in higher education. They discuss trust issues with cloud providers, the importance of understanding data sensitivity, and navigating regulatory compliance. Sheena highlights the vulnerabilities educational institutions face, the value of incide...

Asset Management

Say Easy, Do Hard, Minimum Viable Security – Part 2 – Jon Fredrickson – BSW Vault

December 30, 2024

Check out this episode from the BSW Vault, hand picked by main host Matt Alderman! This segment was originally published on January 3, 2023. With the current macro economic head winds, 2023 budgets are either frozen or are flat. Where should CISOs focus these limited budgets to maximize the most out of their security program? In this segment, we i...