Blind Java Deserialization Vulnerability - Commons Gadgets ↳...

Blind Java Deserialization Vulnerability - Commons Gadgets

↳ https://deadcode.me/blog/2016/09/02/Blind-Java-Deserialization-Commons-Gadgets.html

TL;DR: Exploitation of Java Deserialization vulnerability in restricted environments (firewalled system, updated Java). Technique similar to blind SQL injection enables to extract data from the target system (read files, properties, env vars)….

from Hack+ http://bit.ly/2WafiHF
via IFTTT