Security - Only Developers Can Make It Proactive
summary
Case study demonstrates a full exploit of a Spring Data REST RCE in a demo app using curl, a GitHub vulnerable sample, and a VM split into attacker and god-mode hosts; CVE score is 7.5. The payload uses Java Runtime.exec but only succeeds when called with a Runtime.exec String[] fix (not a single string), and a reverse shell over sockets to port 4444 adds an SSH key to gain persistent access. Root cause: endpoints auto-export from PagingAndSortingRepository; mitigations include exported=false or component upgrades.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:39Agenda
- 3:49Problem
- 5:43Research
- 6:52Example application
- 7:14Advantages of virtual machine
- 8:20Application architecture
- 9:03Demo
- 12:31Presentation
- 14:02Tip
- 14:46Testing
- 17:35What can I do
- 21:33Reverse
- 22:45Socket
- 24:09String Tokenizer
- 28:18Takeaway
related talks
24mSecurity – only developers can make it proactive
43mLive hacking: Breaking into your Java web app
01h 06mLive hacking: Breaking into your Java web app
52mDevSecOps
46mLive hacking: Breaking into your Java web app
02h 38mJava application security the hard way - a workshop for the serious developer
48mCommon vulnerabilities you wish your Java app didn't have!
40mLive hacking: Breaking into your web app