#jndi

How to config and lookup JNDI in websphere?

Java Naming and Directory Interface

What is JNDI?

Understanding JNDI: Simplifying Resource Management in Java

If you are a Java developer, you have probably come across the term JNDI. But what exactly is it, and why do we need it?

Demystifying JNDI: Simplifying Database Connectivity in Java Applications

In the world of Java development, managing database connections efficiently is crucial for building scalable and high-performance…

JNDI Injection — Attack Flow

In this blog, we will be focusing on how the JNDI attack works from behind the scene. For understanding the basics and exploitation of…

JNDI Injection — The Complete Story

This blog investigates the security implications of JNDI Injection, a vulnerability that arises when malicious actors manipulate JNDI…

Uncovering the Log4j Vulnerability in Java: A Critical Bug

Jndi Java in five minute

In Java, JNDI stands for Java Naming and Directory Interface. It is an API (Application Programming Interface) that provides a unified…

Log4j Vulnerability (CVE-2021–44228) — Log4Shell: A Zero-Day Remote Code Execution Exploit

In the realm of Java application development, effective logging and monitoring play an indispensable role in maintaining the reliability…

Dynamically loading Java implant from a remote source to Tomcat

I had a situation where I could do JNDI injection into a Tomcat server leading to RCE. While off the shelf solutions such as this Github…