Training class: Being MEAN - Attacking the MEAN development stack

No ratings

Presented at BSidesBoston 2017 by

Casey Dunham

For years the LAMP (Linux, Apache, MySQL, PHP) stack was the de facto for a large portion of the web applications powering the internet. However, times change and it is being replaced by a new stack utilizing MongoDB, ExpressJS, AngularJS, and NodeJS (MEAN). The MEAN stack makes traditional vulnerabilities hard to exploit and even non-existent, but with new technology comes new vulnerabilities. In this workshop we look at various issues that affect these frameworks and how to test for them. NOTE: In order to follow along with the Labs, attendees should come with a laptop and have BurpSuite (Free) installed.