Java
You're viewing a free preview. Sign in free to read every script.
Why this exists Most security incidents in Java services are not exotic. They are the same few mistakes: trusting a file name, gluing user input into a command or a query, logging a password, using a predictable token,…
Secure Java Basics: Path Traversal, Command and SQL Injection, Secrets, Random Numbers and Deserialization
The handful of vulnerabilities behind most real Java incidents, each demonstrated with a working attack and a working fix: reading files outside a folder, injecting shell commands, SQL injection, leaking secrets in logs, predictable tokens and unsafe deserialization.
Sign in free to read this script, along with the rest of the library.
Sign in free