Naveen Srinivasan·Nov 30, 2024Understanding JNDI: Simplifying Resource Management in JavaIf you are a Java developer, you have probably come across the term JNDI. But what exactly is it, and why do we need it?
Satyendra Jaiswal·Jun 8, 2024Demystifying JNDI: Simplifying Database Connectivity in Java ApplicationsIn the world of Java development, managing database connections efficiently is crucial for building scalable and high-performance…
Pradeep Kumar·May 25, 2024JNDI Injection — Attack FlowIn this blog, we will be focusing on how the JNDI attack works from behind the scene. For understanding the basics and exploitation of…
InInfoSec Write-upsbyPradeep Kumar·May 14, 2024JNDI Injection — The Complete StoryThis blog investigates the security implications of JNDI Injection, a vulnerability that arises when malicious actors manipulate JNDI…
kiarash shamaii·Sep 1, 2023Jndi Java in five minuteIn Java, JNDI stands for Java Naming and Directory Interface. It is an API (Application Programming Interface) that provides a unified…
0x4C3DD·Aug 9, 2023Log4j Vulnerability (CVE-2021–44228) — Log4Shell: A Zero-Day Remote Code Execution ExploitIn the realm of Java application development, effective logging and monitoring play an indispensable role in maintaining the reliability…
Angelystor·Jun 4, 2023Dynamically loading Java implant from a remote source to TomcatI had a situation where I could do JNDI injection into a Tomcat server leading to RCE. While off the shelf solutions such as this Github…