Serial Killer Silently Pwning Your Java Endpoints
OWASPBNL_Java_Deserialization
OWASPBNL_Java_Deserialization
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
AWack Surface<br />
Usages of <strong>Java</strong> serializa@on in protocols/formats/products:<br />
RMI (Remote Method Invoca@on)<br />
JMX (<strong>Java</strong> Management Extension)<br />
JMS (<strong>Java</strong> Messaging System)<br />
Spring Service Invokers<br />
HTTP, JMS, RMI, etc.<br />
Android<br />
AMF (Ac@on Message Format)<br />
JSF ViewState<br />
WebLogic T3<br />
…<br />
…<br />
5
Change language