Posts with tag: Deserialization
| 17 min read
The c3p0 library provides many useful exploitation primitives, deserving more attention
| 12 min read
Exploiting deserialization vulnerabilities in Java 17 and beyond, using JDBC connections
| 8 min read
Vulnerability notes: Log4Shell
Everything you should know about the Log4Shell vulnerability (CVE-2021-44228)
| 14 min read
An Trinh’s RMI Registry Bypass
A closer look at the RMI Registry whitelist bypass gadget from An Trinh’s Blackhat Europe 2019 presentation
| 17 min read
Attacking RMI based JMX services
An attack primer on how to hack into RMI based JMX services
| 24 min read
Attacking Java RMI services after JEP 290
An attack primer on how to attack Java RMI services using Java deserialization