Exploiting Jolokia Agent with Java EE Servers

7 years ago

source link: http://mp.weixin.qq.com/s/blpFK0oigTGtI_eVJxEL0w?amp%3Butm_medium=referral
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Recommend

lucifaer.com 6 years ago
Cache

Attack Spring Boot Actuator via jolokia Part 1

前段时间看到twitter上有国外的研究人员 Exploiting Spring Boot Actuators 这篇文章，打算跟着这篇文章学习一下。作者已经提供了一个

lucifaer.com 6 years ago
Cache

Attack Spring Boot Actuator via jolokia Part 2

本文接上文，这里不会分析原文章中所说的 /env 这种利用的方法，而是说一下rr大佬的发现的另外一条利用链。 0x01 检查MBean 如果说不存在 ch.qos.logback.classic reloadByURL 这个MBe...

106

Github github.com 5 years ago
Cache

GitHub - elastic/apm-agent-java: Elastic APM Java Agent

README.md

zserge.com 4 years ago
Cache

Java agent - Bond or Smith?

Java agent - Bond or Smith?The previous post about JVM turned out to be well-received, so I would like to uncover another fun topic related to JVM - Java agents. Although not everyone gets a chance...

微信 mp.weixin.qq.com 4 years ago
Cache

Java 黑科技——Serviceability Agent

点击蓝字关注我们作者简介潘志超 2017年加入去哪网机票事业部，负责国内售后、行程...

xz.aliyun.com 3 years ago
Cache

Java Agent 从入门到内存马

Java Agent 从入门到内存马 <font color="red">注意：这里只是简短的介绍一下，想要详细了解，请看参考资料。</font> 在JDK1.5以后，javaagent是一种能够在不影响正常编译的情况下，修改字节码。 java作为一...

y4er.com 3 years ago
Cache

Java Agent实现反序列化注入内存shell

9 min readJava Agent实现反序列化注入内存shell2020-09-30本文将要讲解的是通过Java agent拦截修改关键类的字节码，最大程度实现一套代码通用注入内存shell。简述内存shellJava内存shell有很多种，大致分为：动态注...

my.oschina.net 3 years ago
Cache

☕【Java技术指南】「探针Agent专题」Java Agent探针的技术介绍（1）

Java调式、热部署、JVM背后的支持者Java Agent：各个 Java IDE 的调试功能，例如 eclipse、IntelliJ ；热部署功能，例如 JRebel、XRebel、spring-loaded；各种线...

blog.51cto.com 3 years ago
Cache

Java Agent：通灵之术

1. 通灵之术在《火影忍者》中，通灵之术，属于时空间忍术的一种。那么，“通灵之术”，在Java领域，代表什么意思呢？...

arstechnica.com 2 years ago
Cache

Hackers are mass infecting servers worldwide by exploiting a patched hole

ONGOING ATTACK CAMPAIGN — Hackers are mass infecting servers worldwide by exploiting a patched hole Servers running unpatched versions of ESXi are sitting ducks for ESXiArg...

Aggregate valuable and interesting links.
Joyk means Joy of geeK

Exploiting Jolokia Agent with Java EE Servers

Recommend

About Joyk