Posts mit Tag: Java

10 Dez. 2021 | 8 min Lesezeit

Vulnerability notes: Log4Shell

Everything you should know about the Log4Shell vulnerability (CVE-2021-44228)

Java JNDI deserialization CVE-2021-44228 pentest

13 Sept. 2021 | 13 min Lesezeit

Vulnerability digging with CodeQL

Using CodeQL based variant analysis to find vulnerabilties

Java RMI JMX CodeQL

8 Feb. 2020 | 14 min Lesezeit

An Trinhs RMI Registry Bypass

A closer look at the RMI Registry whitelist bypass gadget from An Trinhs Blackhat Europe 2019 presentation

Java RMI deserialization Gadgets pentest penetration-test

28 Apr. 2019 | 16 min Lesezeit

Attacking RMI based JMX services

An attack primer on how to hack into RMI based JMX services

Java RMI JMX deserialization pentest penetration-test

25 März 2019 | 24 min Lesezeit

Attacking Java RMI services after JEP 290

An attack primer on how to attack Java RMI services using Java deserialization

Java RMI deserialization bsides pentest

31 Okt. 2018 | 3 min Lesezeit

jarjarbigs

Merge jar files to simplify remote debugging of closed source java applications

Java Offensive Debugging

2 Juli 2018 | 7 min Lesezeit

Static JWT signing Key in dotCMS

Please let me sign that for you

Vulnerability research dotCMS Java