A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

随着Log4j2漏洞（CVE-2021-44228）事件的持续发酵，针对Java应用程序的安全问题再次引发广泛关注。作为一款广泛应用于企业级应用中的日志框架，Log4j2的安全性直接关系到无数系统的稳定运行。本文将深入剖析该漏洞的成因、复现过程，以及对Java应用安全领域的影响 ...

The Java Development Kit (JDK) is a development environment for building Java applications and applets that can then run on any Java Virtual Machine (JVM). The JDK includes a variety of development ...

Rogue JNDI is a great tool in the realm of JNDI exploitation. Our fork adds many features in order to keep it relevant for modern Java environments.

To illustrate the complexity and severity of modern application attacks, let's examine an attack against the infamous Log4Shell vulnerability (CVE-2021-44228) that sent shockwaves through the ...

Written by Shilpesh Trivedi and Nisarga C M. The Uptycs Threat Research Team has uncovered a large-scale, ongoing operation within the Log4j campaign. Initially detected within our honeypot collection ...

Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect them? Computer log tampering is an almost inevitable part of a ...

Abstract: Log 4Shel1 (CVE-2021-44228) Vulnerability was disclosed on November 24, 2021. It is loophole from JAVA application which is a ubiquitous library of Log4j for logging framework. The hacker ...

Tested on Oracle Weblogic 12 and Java JRE 8 (Official Download Link) for JNIDAT 2.0 version. Tested on Oracle Weblogic 11 and Java JRE 8 for JNIDAT 1.0 version. If you have problems to connect to ...