InBetter ProgrammingbyArtem Smotrakov·Aug 9, 2021How To Find and Fix Timing Attacks in Your Java CodePrevent timing attacks with CodeQL
InGeek CulturebyArtem Smotrakov·Aug 2, 2021Detecting Jackson deserialization vulnerabilities with CodeQLHow to find, fix and prevent them from occurring in the future
InGeek CulturebyArtem Smotrakov·Jun 2, 2021Detect dangerous RMI objects with CodeQLHow to find and fix Java RMI deserialization vulnerabilities
InInfoSec Write-upsbyArtem Smotrakov·Apr 14, 2021Detecting Jakarta Expression Language injections with CodeQLHow to use CodeQL to find EL injections and fix them
InInfoSec Write-upsbyArtem Smotrakov·Apr 14, 2021WS-2016-7107: CSRF tokens in Spring and the BREACH attackRecently WhiteSource security scanner started reporting WS-2016-7107 against Spring-based applications. This is an old issue that was…
Artem Smotrakov·Apr 12, 2021В поездеСел в поезд. Стыдно признаться — в купейный вагон. Последнее время чаще себя балую. Но и цена радует, ведь она такая же, как в плацкартном…
InInfoSec Write-upsbyArtem Smotrakov·Mar 25, 2021Detect Dangerous Spring Service Exporters With CodeQLHow to make sure that CVE-2016-1000027 does not affect your application
Artem Smotrakov·Mar 23, 2021Fosstars: a framework for defining ratings for open source projectsI recently wrote a blog post about a project I have been working on at SAP for a year. The project is called Fosstars. It is an…
InBetter ProgrammingbyArtem Smotrakov·Feb 21, 2021Expression Language Injections in JavaHow to detect JEXL injections with CodeQL
InPython in Plain EnglishbyArtem Smotrakov·Jan 10, 2021Reading a photoresistor on ESP32 with MicroPythonA tutorial that covers everything from a circuit to uploading code to ESP32
