How to hack an Angular app?
summary
Shows concrete, reproducible attacks: webhook to localhost via 0.0.0.0 chains to a malformed GET that smuggles memcached protocol and achieves memcache deserialization RCE, with a recorded proof-of-concept video. Covers large real incidents — Equifax Apache Struts unpatched — and cites that ~25% of breaches exploit known vulnerabilities and ~77% of sites use vulnerable JS libs. Demos tools and mitigations: Metasploit/AutoSploit, NSP and GitHub dependency graph, plus a live typosquatted npm exfiltration example and remediation steps.
AI-written summary · about
chapters (8)
- 0:00Start
- 7:08Routing Function
- 9:05What Is Http
- 16:20Big Exploits Are Made from Smaller Exploits
- 20:25Did Equifax Get Hacked by Zero To Exploit
- 22:18Github Dependency Graph
- 23:58Insufficient Logging and Monitoring
- 29:28Solutions
