PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Jetty Features for Hacking Web Apps

swarm.ptsecurity.com | research | #rce | #java | #waf-bypass | #jetty | #web-server
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PT SWARM on attacking Jetty apps: fingerprinting via Server headers and /;' responses, enumerating webapps and contexts, achieving RCE via crafted XML, and bypassing WAFs in assessments.
Published
Collected

Related coverage

research · swarm.ptsecurity.com
Source Code Disclosure in ASP.NET apps
Building on Cookieless DuoDrop (CVE-2023-36899/36560), the author shows how cookieless sessions in IIS/ASP.NET enable WAF bypass and source code disclosure affecting many .NET web applications.
research · portswigger.net
What's in a tag name? JavaScript, apparently
This research provides technical context that security teams can use for monitoring and validation.
research · portswigger.net
Bypassing WAFs with the phantom $Version cookie
Legacy $Version cookies downgrade parsers into RFC2109 mode, and frameworks — Flask, Django, PHP, Spring — disagree on the result. The discrepancies can be abused to smuggle attacks past WAFs.
research · portswigger.net
Hiding payloads in Java source code strings
Java processes unicode escapes in string literals before parsing, so \u0022 can close a string and run code — Bambdas from untrusted sources can achieve RCE and must be validated first.
research · portswigger.net
Bypassing WAFs and cracking XOR with Hackvertor
Gareth Heyes showcases Hackvertor's tag-based encoding for chaining multiple conversion layers inside Burp requests, demonstrating a Cloudflare WAF bypass and XOR cracking.
research · portswigger.net
When security features collide
James Kettle argues stacked security features can make systems easier to exploit, demonstrating a Cloudflare email obfuscation quirk that bypasses its WAF and all browser XSS filters.
Back