Dangling Packages Leading to RCE

Dangling Packages Leading to RCE

Explore dependency confusion attacks in this 30-minute webinar from nullcon. Discover how developers inadvertently leave non-standard node and Python packages in project JSON files, creating vulnerabilities that attackers can exploit. Learn how malicious actors can claim and publish these packages, leading to remote code execution when victims install them using standard procedures. Witness real-world proof of concepts and practical demonstrations of these attack vectors. Presented by Prasoon Gupta, an Application Security Engineer and Bug Bounty Hunter, this talk provides valuable insights into securing your development process against RCE threats stemming from dangling packages.