-
From Serialized Bytes to Shell: Exploiting Java Deserialization in Spring HttpInvoker
Exploiting Java deserialization in Spring HttpInvoker — a penetration testing case study from reconnaissance to remote code execution.
-
General aspects of Penetration Testing in ICS/SCADA
Penetration testing in ICS/SCADA environments — scope, methodology, risk assessment and security evaluation approaches.