Search posts, tags, users, and pages
Max Maass
Building and breaking software before other people do :)
Spring is a set of frameworks for developing Applications in Java. It is widely used, and so it is not unusual to encounter it during a security audit or penetration test. One of its features that I recently encountered during a whitebox audit is act...
Shai Almog
25 years ago I was lucky. I faced my debugging ignorance. It's a skill we don't learn at school. Hopefully I can help you reach a similar ep
Great post! Spring makes everything easy, including shooting yourself in the foot and exposing your entire DB accidentally.We need more awareness around these issues!
Ruben Scheedler
Advocate of Social Programming
Great article! I recently started using actuator, but was not aware of the risks you set out here. Thanks for sharing them
Shai Almog
25 years ago I was lucky. I faced my debugging ignorance. It's a skill we don't learn at school. Hopefully I can help you reach a similar ep
Great post! Spring makes everything easy, including shooting yourself in the foot and exposing your entire DB accidentally.We need more awareness around these issues!