Java

MBeans you can call over HTTP and an SSLContext you can rewrite at runtime. Java hands you a lot.

2020

patrik.re 16 Jun 2020

Jolokia endpoints: JNDI RCE and heap dumps

A full lab build and exploitation walkthrough for exposed Jolokia JMX endpoints: reflected XSS (CVE-2018-1000129), JNDI remote code execution via a rogue LDAP server (CVE-2018-1000130), and dumping the Java heap to recover credentials.

CVE-2018-1000129 CVE-2018-1000130

2017

patrik.re 21 Oct 2017 Archive

Android certificate pinning bypass with Frida

A walkthrough of installing the Burp CA on an Android device, running frida-server and using an SSL re-pinning Frida script to intercept traffic from apps that pin certificates.

↑