Descubriendo Tesoros Ocultos en el Mundo Java - Ekoparty 2023
Explora técnicas avanzadas de reconocimiento, detección y explotación de vulnerabilidades en Java, incluyendo una herramienta integral para automatizar procesos y mejorar la seguridad.
Log4Shell Vulnerability - Bugcrowd Security Flash
Explore the critical Log4Shell vulnerability, its impact, and mitigation strategies in this concise security briefing from Bugcrowd's expert.
Automated Gadget Chain Discovery for Deserialization Vulnerability Remediation
Explore automated discovery of Java deserialization gadget chains for vulnerability assessment and prioritized remediation, with insights on a new FOSS toolkit for evaluating security risks.
Dynamic Source-Sink Analysis for Java Applications - From the Ground Up
Dynamic source-sink analysis for Java applications to detect security vulnerabilities, aimed at developers for use during development, not production. Demonstrates live detection of issues like log manipulation.
Log4Shell Live Hack - A Hands-on, Actionable Fix Guide
Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.
Hardening Java's Access Control by Abolishing Implicit Privilege Elevation
Explores Java's access control vulnerabilities, proposing explicit privilege elevation to enhance security. Demonstrates how removing shortcuts in the Java Class Library can prevent confused-deputy vulnerabilities without performance loss.
Finding and Exploiting Novel Flaws in Java Software
Explore techniques for discovering and exploiting vulnerabilities in Java applications, focusing on novel flaws and advanced security research methodologies.
Log4Shell - The Worst Java Vulnerability in Years
Explore the critical Log4Shell vulnerability, its impact on Java systems, and essential mitigation strategies in this comprehensive security analysis.
Legacy Java Vulnerabilities - Ignore at Your Own Risk
Explore legacy Java vulnerabilities, their persistence, and mitigation strategies. Learn about security risks, update challenges, and alternative approaches for protecting enterprise applications.
Attacking JSON - Vulnerabilities in Popular Parsers
Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.
Java LangSec - New Security Controls in Java 8 and 9
Explore new security controls in Java 8 and 9 with expert Jim Manico. Learn about Java LangSec and enhance your secure coding practices for web applications.
Making the Future Secure with Java
Explore Oracle's progress on Java platform security and future plans. Learn about evolving threats and strategies to enhance Java's security in an increasingly sophisticated attack landscape.
Stranger Danger - Your Java Attack Surface Just Got Bigger
Hands-on live-hacking session exploring vulnerabilities in cloud-native Java apps. Learn to identify threats, protect against risks, and implement best practices for secure development.
Java 21 Security Updates - From Cryptography to Configuration
Explore Java 21's security updates, including cryptographic enhancements, API advancements, and monitoring tools. Learn to build applications with modern algorithms and protocols for improved security.
Making the JDK More Secure - New Features and Default Configuration
Explore JDK 9's enhanced security features, including SHA-3, OCSP stapling, and DTLS. Learn about Oracle's efforts to strengthen Java's cryptographic algorithms and default security configurations.
Keeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
Explore Java's cryptographic enhancements and secure coding practices to develop robust applications with strong security capabilities and protection against vulnerabilities.
Evolving the Security of the Java Platform
Explore recent improvements in Java's security and cryptographic APIs, learn about the Java Cryptographic Roadmap, and understand the process of maintaining platform security.
Secure Coding Guidelines for Java SE - Overview and Best Practices
Learn essential Java secure coding practices to prevent vulnerabilities. Covers guidelines, real-world examples like Log4Shell, and practical tips for implementing security throughout the development process.
5.0 Shades of Java Exploitation
Explore Java exploitation techniques in this DefCamp 2023 talk. Discover vulnerabilities, hacking methods, and cybersecurity insights from expert Matei Badanoiu of Deloitte.
Java 22 Release Notes Review - Key Changes and Updates
Comprehensive overview of Java 22 release, covering new features, improvements, deprecations, and performance updates. Ideal for developers staying current with Java's latest advancements.
Java 17 to 21: A Showcase of JDK Security Enhancements
Explore JDK security advancements from Java 17 to 21, covering cryptographic algorithms, configuration, API improvements, and Java Flight Recorder's role in enhancing software security.