{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 39 - NodeJS Security Pentesting and Exploitation | Episode 1: From V8 Fundamentals to Namespace and Parameter Pollution","slug":"course-39-nodejs-security-pentesting-and-exploitation-episode-1-from-v8-fundamentals-to-namespace-and-parameter-pollution","published_at":"2026-07-07T06:00:02+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-39-nodejs-security-pentesting-and-exploitation-episode-1-from-v8-fundamentals-to-namespace-and-parameter-pollution","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-39-nodejs-security-pentesting-and-exploitation-episode-1-from-v8-fundamentals-to-namespace-and-parameter-pollution--72712024","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72712024/node.mp3","summary":"In this lesson, you’ll learn about: Node.js runtime architecture, single-threaded execution risks, global scope vulnerabilities, and HTTP Parameter Pollution (HPP)1. What is Node.js?🔹 Definition: A JavaScript runtime built on: Node.js Chrome V8 engine 🔹 Purpose: Run JavaScript outside the browser Build scalable server-side applications 👉 Key Insight Node.js is not a framework—it’s a runtime environment2. Node.js Architecture🔹 Core model: Single-threaded Event-driven Non-blocking I/O 🔹 How it works: One main event loop handles all requests Async tasks delegated to system threads 👉 Key Insight It scales well—but one bad crash can affect everything3. Single-Threaded Risk🔹 Problem: One runtime thread handles all requests 🔹 What can go wrong: Uncaught exception → entire server stops Memory leak → whole app affected 👉 Key Insight Scalability comes with system-wide fragility4. Global Namespace Pollution🔹 Definition: Variables declared globally in Node.js are shared across requests 🔹 Risk in Express.js: Data leakage between users Shared state corruption 🔹 Example risk: One user modifies a global variable affecting all users 👉 Key Insight Global state in server apps = security vulnerability5. Why Global Variables Are Dangerous🔹 Issues: No request isolation Cross-session data exposure Hard-to-debug behavior 👉 Key Insight Server logic must be stateless by design6. HTTP Parameter Pollution (HPP)🔹 Definition: Sending multiple values for the same parameter Example:?id=1&id=2 🔹 Node.js behavior: Captures all values as an array 👉 Key Insight Unlike some frameworks, Node.js does not automatically collapse parameters7. Why HPP Becomes a Security Issue🔹 Risks: Bypass filters Confuse validation logic Manipulate backend decisions 🔹 Example: WAF expects single value but receives array 👉…","meta_description":"In this lesson, you’ll learn about: Node.js runtime architecture, single-threaded execution risks, global scope vulnerabilities, and HTTP Parameter Pollut…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1332,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-39-nodejs-security-pentesting-and-exploitation-episode-1-from-v8-fundamentals-to-namespace-and-parameter-pollution/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-39-nodejs-security-pentesting-and-exploitation-episode-1-from-v8-fundamentals-to-namespace-and-parameter-pollution.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}