Security – only developers can make it proactive
summary
Live demo shows how a concrete exploit of Spring Boot Data Rest turns a known deserialization flaw into Remote Code Execution that fully compromises a server; tools include a crafted HTTP payload, a simple gadget chain and an interactive reverse shell used to list files and spawn processes. The session maps the exact vulnerable versions, the detection patterns observed on logs and IDS, and why blind upgrading alone fails versus developer fixes and safer usage patterns.
AI-written summary · about
chapters (7)
- 0:00Proactive security introduction
- 3:08Common app vulnerabilities
- 8:00Security breach examples
- 12:11Balancing online/offline security
- 16:20Security tools demo
- 20:53Developers' role in security
- 23:03Q&A
related talks
36mSecurity - Only Developers Can Make It Proactive
43mLive hacking: Breaking into your Java web app
01h 06mLive hacking: Breaking into your Java web app
52mDevSecOps
46mLive hacking: Breaking into your Java web app
47mDon't Get Burned! Secure Coding Essentials to Protect Your Application
35mInside a hacker’s mind
42mModern web application bugs