How to hack an Angular app?
summary
Three real hacks show how ordinary mistakes become full compromises: Equifax exposes 184 million records by failing to patch a known Apache Struts vuln; a GitHub Enterprise bug chains a webhook, CRLF injection and memcache protocol smuggling to achieve remote code execution; and npm typo-squatting npm package setup scripts exfiltrate environment variables (one mimic package runs for two weeks and has millions of downloads). Detections: Exploit-DB, Snyk/NSP, scoped packages and dependency scanning; updating and vetting installs actually stop most of these.
AI-written summary · about
