How to find a potential JSON Java deserialization code vulnerability with a whitebox approach in web server source code?

I would like to know a somewhat general approach for white box vulnerability scanning, mainly focused around Java deserialization code bugs that could lead to RCEs (Remote Code Execution following deserialization).
So far, my current strat… Continue reading How to find a potential JSON Java deserialization code vulnerability with a whitebox approach in web server source code?

Block certain namespace webpages for anonymous users (non registered users) with some Information Security method

Per each general audience webpage (i.e. any main-namespace page such as an article page or Category: page), the MediaWiki content management system creates about 10 or 100 or 1,000 if not more webpages (link pages, revision pages, revision… Continue reading Block certain namespace webpages for anonymous users (non registered users) with some Information Security method

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to an extremely huge financial loss.
I gues… Continue reading Recommended secure option for uploading files to web server from a dynamic IP?