TGViewer
程序员资源分享频道 程序员资源分享频道 @gotoshare · 16.8K subscribers
Post #901 26K
Apache Log4j 的 0 day 远程代码执行，是经典的 JNDI注入攻击，通过加载远程类完成，下面两篇文章大家都学习一下吧其漏洞原理。

[1] Exploiting JNDI Injections in Java https://www.veracode.com/blog/research/exploiting-jndi-injections-java

[2] A Journey-From JNDI-LDAP Manipulation To Remote Code Execution https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf
Veracode Exploiting JNDI Injections in Java | Veracode Application Security for the AI Era | Veracode
Open in Telegram All posts from @gotoshare
More from @gotoshare
  1. Nov 10, 2024The owner of this channel has been inactive for the last 11 months. If they remain inactiv…
  2. May 11, 2023https://youtu.be/QePKvqLIsP0
  3. May 8, 2023这两天技术圈头条的【Amazon的流媒体平台 Prime Video 从微服架构到单体架构”】我以为 Prime Video 遇到不是技术问题，而是AWS Step Functio…
  4. Apr 27, 2023吴恩达的新课 https://twitter.com/andrewyng/status/1651605660382134274
  5. Apr 7, 2023两年前，我找视频制作公司花了半年做了个二十年来【软件架构的演进】的视频（ https://youtu.be/6X74pEJ58-E ），从单体架构到SOA，再到微服务，再到云原生架…
  6. Feb 18, 2023《使用 Easegress 实现 Telegram 翻译机器人》 https://megaease.cn/zh/blog/2022/09/10/build-a-telegram-t…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →