Skip to content
Hallway
0:00 / 0:00

#mongodb#nosqlinjection#express

dotJS 2016 - Vladimir de Turckheim - NoSQL injections in Node.js: The case of MongoDB

dotconferences

23K subscribers • 9 videos on Hallway

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • A classic. People kept recommending it from 2017 to 2020.
  • Presented by Vladimir de Turckheim
  • May be out of date. Uploaded 9 years ago, in an area where tools change fast.

Intermediate. Assumes working knowledge.

3.3K views9 years ago2 recommendations

SecurityWeb developmentWeb and application securityExploits and vulnerabilitiesNode.js, Deno and Bun

Vladimir de Turckheim explains how to perform and prevent NoSQL injection attacks in a Node.js Express application using MongoDB.

Filmed at 2016.dotjs.io on December 5th in Paris. More talks on thedotpost.com Everyone knows about SQL injections. They are pretty old and well documented. But, is it possible to inject malicious instructions into a NoSQL database? In this talk, Vladimir explains how to inject a MongoDB database from a Node.js Express application.

Why it's here

2 people recommend this

What people say. Recommended as a quick explanation of how failing to validate incoming data can lead to NoSQL injection vulnerabilities.

u/ecaresin r/node • Recommends

On “I am a Backend Engineer and getting fired soon”

Hey, sorry to hear about that, I have not digged in details, but checking the code I see that you never validat incoming data (either in the querystring or in the body). This is actually a pretty bad practice as it can lead to several bugs or even security incidents (as nosql injections in your case) - here is a quick talk on that latest topic [video
11View on Reddit

u/dobkin-1970in r/node • Recommends

dotJS 2016 - Vladimir de Turckheim - NoSQL injections in Node.js: The case of MongoDB
3View on Reddit