https://blog.medarkus.net/tags/nodejs/Recent content in nodejs on Security AddictHugo -- gohugo.ioen-usme@darkus.dev (DeMarcus Williams)me@darkus.dev (DeMarcus Williams)Sun, 12 Jul 2020 13:55:16 -0500https://blog.medarkus.net/posts/gynvael-web-challenge-6/Sun, 12 Jul 2020 13:55:16 -0500me@darkus.dev (DeMarcus Williams)https://blog.medarkus.net/posts/gynvael-web-challenge-6/We’re back again with another NodeJS web challenge from Gynvael. Let’s get into it! Description Just like the previous challenges, we are given the source code for the NodeJS application: const http = require('http') const express = require('express') const fs = require('fs') const path = require('path') const PORT = 5006 const FLAG = process.env.FLAG || "???" const SOURCE = fs.readFileSync(path.basename(__filename)) const app = express() const checkSecret = (secret) => { return [ secret.https://blog.medarkus.net/posts/gynvael-web-challenges/Tue, 12 May 2020 13:55:01 -0500me@darkus.dev (DeMarcus Williams)https://blog.medarkus.net/posts/gynvael-web-challenges/It was recently brougt to my attention that Gynvael Coldwin has been releasing some CTF-style Express.js web challenges, so I decided to give them a try :) As of 5/12/2020, there are only 3 challenges published Level 1 Level 1 begins here, where we are presented with a standard layout for this type of web challenge: a blank page with the JS source echoed back to us. Source code Level 1 const express = require('express') const fs = require('fs') const PORT = 5001 const FLAG = process.