Skip to main content

Posts

Showing posts from June, 2016

Testing Node JS and MongoDB - a dummy guide

Web application is a most widely used nowadays. Well, it depends on what platform that you wanted to use for. From Java, PHP, ASP, ColdFusion etc.  Also databases like MySQL, MSSQL Oracle, DB2, Informix etc. All these so call platform have many vulnerability which evolved day-to-day. Patching and update is a must and become important for us keep track on any issues or risk and vulnerabilities within the application. As for now, JS Framework e.g Node JS with MongoDB has become popular in web application deployment. So, I been thinking hacking into these framework or platform is kind a new to me. Most people said that Node JS and MongoDB are invulnerable to SQL Injection and many other common vulnerability. Apart for that I been doing some research on this on how to hack or exploiting this. I been reading this guide  by Petko  @pdp A video presented at BlackHat USA 2015 by Maty Siman  &  Amit Ashbel For mongoDB best practices  and reading  guide. Using Metasploi