Howyahax
banner
howyahax.bsky.social
Howyahax
@howyahax.bsky.social
To learn new things and share things
Reposted by Howyahax
I just wrote a new blog post! This is how I (ab)used a jailed file write bug in Tomcat/Spring. Enjoy!

Remote Code Execution with Spring Properties :: srcincite.io/blog/2024/11...
Remote Code Execution with Spring Properties
Recently a past student came to me with a very interesting unauthenticated vulnerability in a Spring application that they were having a hard time exploiting...
srcincite.io
November 26, 2024 at 11:57 PM
Hello world
November 14, 2024 at 11:39 PM