What I would like to show you is a simple technique that can be effectively used against modern web applications, such as those written on top of NodeJS and MongoDB. In essence, this technique is very similar to SQL Injection (SQLI) although much simpler ... (more…)

A Node-based static site generator. Contribute to joshforisha/ssg development by creating an account on GitHub. (more…)

tl;dr: I went on a search of Node.js/Express.js authentication tutorials. All of them were incomplete or made a security mistake in some… (more…)

I’d like to think I know Node pretty well. I haven’t written a web site that doesn’t use it for about 3 years now. But I’ve never actually…

You're seeing a blank page saying "HTTP_ERROR 431"? And you're running a Node js HTTP server, like express or fastify? Running node --help states: --max-http-header-size=... (more…)