Posts with tag: Java
| 17 min read
The c3p0 library provides many useful exploitation primitives, deserving more attention
| 12 min read
More shells in Java based applications through ROGUE JNDI NG
| 12 min read
Exploiting deserialization vulnerabilities in Java 17 and beyond, using JDBC connections
| 8 min read
Vulnerability notes: Log4Shell
Everything you should know about the Log4Shell vulnerability (CVE-2021-44228)
| 13 min read
Vulnerability digging with CodeQL
Using CodeQL based variant analysis to find vulnerabilities
| 14 min read
An Trinh’s RMI Registry Bypass
A closer look at the RMI Registry whitelist bypass gadget from An Trinh’s Blackhat Europe 2019 presentation
| 17 min read
Attacking RMI based JMX services
An attack primer on how to hack into RMI based JMX services
| 24 min read
Attacking Java RMI services after JEP 290
An attack primer on how to attack Java RMI services using Java deserialization
| 3 min read
Merge jar files to simplify remote debugging of closed source java applications
| 7 min read
Static JWT signing Key in dotCMS
Please let me sign that for you