Hi, I'm Liran 👋

I created a series of comprehensive vulnerable code deep-dive training books on Secure Coding in Node.js to help developers master Node.js security with hands-on vulnerability review and remediation walkthroughs

Node.js Secure Coding: Defending Against Command Injection Vulnerabilities

Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities

Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities

Software Engineer · Web Security Activist · Author

A GitHub Star, world-wide recognized for championing open source software and actively working within communities to inspire and lift other humans. Liran also received the OpenJS Foundation's Pathfinder for Security for his work on Node.js security. A JavaScript & Node.js software developer, building web applications and command-line tools. A web security activist , engaging in security research, software supply chain security, and regular contributor and project lead to OWASP Foundation projects. An avid member of the Node.js Foundation ecosystem security working group, dedicated to advancing Node.js security awareness and skill-set in the open source community. Developer Advocate at Snyk.

Awarded:

• ⭐️ 2023 GitHub Star
• 🏆 2022 OpenJS Foundation's Pathfinder Award for Security
• ⭐️ 2022 GitHub Star
• ⭐️ 2021 GitHub Star

Web Security Activism

• Author of Node.js Secure Coding: Defending Against Command Injection Vulnerabilities
• Author of Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities
• Author of Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities
• Author of npm Security Cheat Sheet
• Author of Node.js Docker Security Cheat Sheet
• Member of Node.js Foundation's Ecosystem Security working group
• OWASP Project Member of NodeGoat
• OWASP Project Lead for CWE Tool and CWE SDK

Blog & other resources

• Liran Tal blog
• Node.js Security Blog
• Liran's articles on the Snyk blog

Published Author

Essential Node.js Security Liran Tal

Web Security: Learning HTTP Security Headers Liran Tal

O'Reilly Serverless Security Guy Podjarny, Liran Tal

Snyk's State of Open Source Security 2019 Liran Tal