jet390

4 ms·

1. 1.▲
   by jet390 5y ago

   If you've been impacted by these log4j vulnerabilities, have a look at aegis4j, a Java agent that completely disables platform features you don't use, before an attacker uses them against you (including e.g. JNDI and Java serializ
2. 2.▲
   by jet390 5y ago

   The recent log4j vulnerability really piqued my interest, and I've spent the last few evenings working on a proof of concept Java agent that could mitigate similar vulnerabilities in the future, for applications that are able to comple
3. 3.▲
   Aegis4j: Avoid the Next Log4Shell Vulnerability(github.com)

   5 points by jet390 5y ago|0 comments