Server Side JavaScript Injection
Thank you for watching the video :
Server Side JavaScript Injection
Server-side JavaScript (SSJS) is integral to many NoSQL databases such as MongoDB and Neo4j, and the web server framework Node.js is also built on SSJS. Server Side JavaScript injection is the ability for a user to inject code that will in turn be evaluated by the server, and therefore would allow an attacker to potentially execute arbitrary code under the context of the server and interaction with the filesystem, which may lead to the full compromise of the host.
Denial of Service conditions is also possible, by killing the process or entering an infinite loop as NodeJS runs in a single thread.
In this episode, we will discuss what is SSJI and will see a demo of the exploitation.
ABOUT OUR CHANNEL📜
Cyber Security is a non-profit initiative taken by security professionals. Here we are uploading a series of videos to learn and get expertise in various domains of security. We are teaching tools, techniques, and methods which can be used on penetration testing assignments.
📌CHECK OUT OUR OTHER VIDEOS
▶️ Advance File Upload Exploit | Double Extension
• Advanced File Upload Exploit | Double...
▶️ OWASP ZAP For Beginners | Form Authentication
• OWASP ZAP For Beginners | Form Authen...
▶️ Insecure Deserialization | OWASPT Top 10
• Insecure Deserialization | OWASPT Top 10
▶️ HTTP Security Headers | Part 02
• HTTP Security Headers | X-Frame-Optio...
FOLLOW US ON SOCIAL
▶️Security Blog
https://bhaumikshah04.blogspot.com/
▶️Facebook
/ infosecforstarters
#owasptop10 #webapppentest #appsec #applicationsecurity #apitesting #apipentest #cybersecurityonlinetraining #freesecuritytraining #penetrationtest #ethicalhacking #pentestforbegineers #ethicalhackingforbeginners #modernwebappattacks #serversidejavascriptinjection #ssji #injection #serversideinjection
Related Searches:
javascript injection example
javascript injection password
server side javascript injection reverse shell
server side javascript injection payloads
server side javascript exploit