https://github.com/wahengchang/nodejs-security-must-know

It is a note about security on nodejs
https://github.com/wahengchang/nodejs-security-must-know

command injection node nodejs security

Last synced: 3 months ago
JSON representation

It is a note about security on nodejs

• Host: GitHub
• URL: https://github.com/wahengchang/nodejs-security-must-know
• Owner: wahengchang
• Created: 2017-05-09T06:30:42.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2018-07-16T05:44:24.000Z (over 6 years ago)
• Last Synced: 2024-07-23T14:39:33.214Z (4 months ago)
• Topics: command, injection, node, nodejs, security
• Language: JavaScript
• Size: 10.7 KB
• Stars: 47
• Watchers: 6
• Forks: 12
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-security-collection - **28**星

README

        
# Nodejs security must know

This is a note about Node.js security, by reading the amazing book __*Securing Node Applications*__ by @ChetanKarade, which explains couple of common vulnerabilities in very simple way, and provides relevant npm modules as solutions to protect Node.js Web Apps.

The rate of security incidents is on the rise, based on the analysis of 64,199 security incidents and 2,260 breaches in 2015, the Verizon Data Breach Investigations Report published that the top 10 vulnerabilities accounted for 85 percent of these successful exploits. 

## Content

 - Command Injection : [more](https://github.com/wahengchang/nodejs-security-must-know/tree/master/command_injection)

 - Broken Authentication : [more](https://github.com/wahengchang/nodejs-security-must-know/tree/master/broken_authentication)

 - Cross-Site Scripting [more](https://github.com/wahengchang/nodejs-security-must-know/tree/master/cross_site_scriptingg)

 - Insecure Direct Object References[more](https://github.com/wahengchang/nodejs-security-must-know/tree/master/direct_object_reference)

## Remark

 - hijack

 - exploit

 - vulnerable

# Reference:

[OWASP](https://www.owasp.org/index.php/Main_Page)