---
id: 2332
title: "Halloween Hacks and How to Avoid Them #SecOps Edition"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/halloween-hacks-and-how-to-avoid-them-secops-edition/"
published_at: "2018-10-26T00:00:00Z"
tags: ["java", "client-side-security", "obfuscation", "bugcrowd", "code-signing", "secops", "decompilation", "dotnet", "threat-education"]
phying_url: "https://phying.com/item/2332"
lang: en
---

# Halloween Hacks and How to Avoid Them #SecOps Edition

## Summary

A Halloween-themed SecOps post warns against client-side trust: .NET and Java apps can be decompiled to expose backend hosts and credentials, while obfuscation only delays attackers.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2018-10-26T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/halloween-hacks-and-how-to-avoid-them-secops-edition/
- **Phying News:** https://phying.com/item/2332