Collaborate Disseminate
I have a target which is a Java applet. When I reach the IP in the browser and enter credentials into a form, a .jnlp file downloads, which I need to double-click on to access the page.
Does Zap have support for scanning this types of Web … Continue reading Can Zap scan a web app launched as a JAVA applet?
I am doing a security course and a module on client side attacks, which is why this post might seem evil or outdated.
I have a Java applet fetching a malicious jar file and trying to then download and execute a malicious binary on a Windo… Continue reading Java Applet AccessControlException
So i have a jnlp application that is launched through a java web launcher.
Setup:
– I have burp running in a vm
– The thick client is running on my windows base machine.
– I’ve got the referred jar files.
– The application e… Continue reading Need Guidance with java thick client pentesting
I am monitoring a site where there is an applet. To use it, there is the download and the execution of a jnlp file. I would like to monitor the requests made from and to that file through Burp.
I read the documentation here h… Continue reading Configure burp to intercept JNLP
When we say that Java applets are vulnerable, what exactly do we mean? A vulnerability in the underlying jre? In the browser? In the “applet” component?
what exactly is exploited?
Continue reading What *actually* is a Java applets vulnerability?
When we say that Java applets are vulnerable, what exactly do we mean? A vulnerability in the underlying jre? In the browser? In the “applet” component?
what exactly is exploited?
Continue reading What *actually* is a Java applets vulnerability?