YoVDO

Dangling Packages Leading to RCE

Offered By: nullcon via YouTube

Tags

nullcon Courses Cybersecurity Courses Remote Code Execution (RCE) Courses JSON Courses Remote Code Execution Courses

Course Description

Overview

Explore dependency confusion attacks in this 30-minute webinar from nullcon. Discover how developers inadvertently leave non-standard node and Python packages in project JSON files, creating vulnerabilities that attackers can exploit. Learn how malicious actors can claim and publish these packages, leading to remote code execution when victims install them using standard procedures. Witness real-world proof of concepts and practical demonstrations of these attack vectors. Presented by Prasoon Gupta, an Application Security Engineer and Bug Bounty Hunter, this talk provides valuable insights into securing your development process against RCE threats stemming from dangling packages.

Syllabus

Dangling Packages leading to RCE | Prasoon Gupta | Nullcon Webinar 2021


Taught by

nullcon

Related Courses

Computer Security
Stanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network