Michael Stepankin

Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! github.blog/security/vul...

22.01.2025 18:16 — 👍 28    🔁 16    💬 1    📌 0

Remote Code Execution with Spring Properties Recently a past student came to me with a very interesting unauthenticated vulnerability in a Spring application that they were having a hard time exploiting...

I just wrote a new blog post! This is how I (ab)used a jailed file write bug in Tomcat/Spring. Enjoy!

Remote Code Execution with Spring Properties :: srcincite.io/blog/2024/11...

26.11.2024 23:57 — 👍 76    🔁 36    💬 1    📌 2

How's your day going?

15.11.2024 08:53 — 👍 26    🔁 2    💬 2    📌 0