Pentesting Node.js Application : Nodejs Application Security
Hello folks, Today we will see how we can do Pentesting Of NodeJS Application : Attacking NodeJS Application.
As we know that Javascript is a very common and important language and also a light wight which do our most of task very easily.
But we also know that, Great efficiency comes with great risk. Node JS is a kind of server side programming language derived from JS.
According to Wiki
Node.js is an open-source, cross-platform JavaScript run-time environment for executing JavaScript code server-side. Historically, JavaScript was used primarily for client-side scripting, in which scripts written in JavaScript are embedded in a webpage's HTML, to be run client-side by a JavaScript engine in the user's web browser. Node.js enables JavaScript to be used for server-side scripting, and runs scripts server-side to produce dynamic web page content before the page is sent to the user's web browser. Consequently, Node.js has become one of the foundational elements of the "JavaScript everywhere" paradigm,[4] allowing web application development to unify around a single programming language, rather than rely on a different language for writing server side scripts.
Today we will see some of the vulnerabilities which can be exploited in Node.JS application. We will also take a look on the source code for better understanding.
