From the course: Foundational JavaScript Security
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Reconnaissance introduction - JavaScript Tutorial
From the course: Foundational JavaScript Security
Reconnaissance introduction
- [Instructor] The goal of doing reconnaissance is to be able to figure out what a set of common tools, if there are any issues or open doors for hackers to exploit. In this stage, you valuate your code. So the best way to do this is to do an NPM install or NPM audit, which we'll explore a little bit later on. So let's first start with NPM install. And the very first step is to go through any messages the console log could be telling you. When there are messages related to dependencies being deprecated, act on them immediately, especially at the first level. So if we take a look at the package.json file here we have some dependencies that we install into our project. So some of these messages will be related to dependencies within any of those packages. But what we're looking for is the phase packages that we've installed. If there's any issues on those 'cause you've been basically using the same package for a while, but…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
(Locked)
Reconnaissance introduction4m 59s
-
(Locked)
Introduction and setup for Snyk4m 34s
-
(Locked)
Introduction to GitHub Dependabot3m 22s
-
(Locked)
Introduction to AppSensor1m 17s
-
(Locked)
Reconnaissance applied to project45s
-
(Locked)
Challenge: What is the purpose of reconnaissance?25s
-
(Locked)
Solution: What is the purpose of reconnaissance?35s
-
(Locked)
-
-
-