Discovering Hidden Properties to Attack the Node.js Ecosystem

Discovering Hidden Properties to Attack the Node.js Ecosystem

Explore a groundbreaking attack method against the Node.js platform in this 40-minute Black Hat conference talk. Delve into the concept of hidden property abusing (HPA), a novel technique that exploits JavaScript's data exchanging feature to manipulate critical program states in Node.js applications. Learn how this attack can compromise server-side applications and gain insights from security experts Feng Xiao, Jianwei Huang, Yichang Xiong, Guangliang Yang, Hong Hu, Guofei Gu, and Wenke Lee as they present their findings on this significant vulnerability in the Node.js ecosystem.