Might As Well JUMP - Exploit Development For Java Serialization
Hack In The Box Security Conference via YouTube
AI, Data Science & Business Certificates from Google, IBM & Microsoft
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore advanced exploit development techniques for Java serialization vulnerabilities in this conference talk from the Hack In The Box Security Conference. Dive into a demonstration of a zero-day custom exploit targeting a simple application deployed in Apache MyFaces on the latest version of Tomcat. Learn how to create a Python exploit that breaks HMAC and MAC through cryptographic manipulation. Gain insights into reverse engineering popular security applications for vulnerabilities using a concise ASM command. Delve into the intricacies of Return-Oriented Programming (ROP) and egg hunting techniques, illustrated through a custom Firefox remote code execution vulnerability written in asm.js. This 23-minute session offers a comprehensive look at cutting-edge exploit development strategies, providing valuable knowledge for security professionals and researchers.
Syllabus
#HITBHaxpo D2 - Might As Well JUMP: Exploit Development For Java Serialization - Jameel Nabbo
Taught by
Hack In The Box Security Conference