CODE WHITE - FINEST HACKING
Intelligence Driven Security
Initial Assessment
Security Intelligence Service
About us
PUBLIC VULNERABILITY LIST
Local Privilege Escalation in Ivanti DSM
SPPageparserFilter Bypass in SharePoint
Data Source Protection Bypass During XML Deserialization in DevExpress
...
CAREERS
Challenge
Pentester / Redteamer
Developer
Systems Engineer / Admin
BLOG
Blindsiding auditd for Fun and Profit
From Blackbox .NET Remoting to Unauthenticated Remote Code Execution
Java Exploitation Restrictions in Modern JDK Times
...
>
CODE WHITE - Finest Hacking
>
Credits
>
Matthias Kaiser
Java Deserialization in Hyperion
Java Deserialization in Weblogic JMS Client
Java Deserialization in Weblogic JMS Client
Java Deserialization in WebSphere MQ JMS Client
Java Deserialization in Endpoint Protection Manager
Java Deserialization in Active MQ
in Flex BlazeDS
Java Deserialization in Bamboo
Authentication Bypass Arbitrary File WriteRead Privilege Escalation Path Traversal SQL Injection Binary Planting in Endpoint Protection
Java Deserialization in WebLogic Server
Java Deserialization in WebLogic Server
Privilege Escalation via named pipe in iPass Open Mobile
Java Deserialization in ActiveMQ Artemis JMS Client
Java Deserialization in Qpid Client/JMS Client
Java Deserialization in Spring AMQP
Java Deserialization in Weblogic Server
Java Deserialization in Weblogic Server
Java Deserialization in WebLogic Server
Java Deserialization in WebLogic Server