Spring Actuator Security, Part 1: Stealing Secrets Using Spring Actuators
Spring is a set of frameworks for developing Applications in Java. It is widely used, and so it is not unusual to encounter it during a security audit or penetration test. One of its features that I recently encountered during a whitebox audit is act...
Responses
Markdown supported · ⌘↵ to post
Shai Almog
25 years ago I was lucky. I faced my debugging ignorance. It's a skill we don't learn at school. Hopefully I can help you reach a similar ep
Great post! Spring makes everything easy, including shooting yourself in the foot and exposing your entire DB accidentally.We need more awareness around these issues!