Web Security - Lecture 10 - Code Injection

[@keshavmishra2397]

Thank you for uploading these lectures.

[@shubham_srt]

Thanks :)

[@jacobeckert4562]

at 53:00 i don't think that example really is proving anything about node code injection right? cause command line is parsing that as two separate statements b/c of the semicolon: 1) run the node program with your arg, then 2) run the command ls (it is NOT the node program that is invoking ls it is the command line doing it). to get the injection you would need to run the node program like: node cat.js 'file.txt; ls' also i've been loving these lectures thanks so much for putting them out here i'm learning so so so much stuff. perfect for quarantine times!

[@muudus_tv]

Hi Jacob... Can you please help me by providing the lecture PDFs if you have it with you. I am having trouble running the codes and cs253 website is not accessible.