Advanced RMI Exploitation After JEP 290 Implementation
Understanding JEP 290
JEP 290 was introduced in updates such as JDK 6u141, JDK 7u131, and JDK 8u121 to mitigate deserialization risks. Its core features include:
Implementation of class restriction mechanisms (whitelists or blacklists).
Limitations on the depth and complexity of deserialization graphs.
Introduction of class validation specific ...
Posted on Sat, 30 May 2026 20:45:23 +0000 by Robban
Mastering Jackson JSON Processing in Java
For Spring Boot applications, configure Jackson settings in application.yml:
spring:
# jackson configuration
jackson:
# date format
date-format: yyyy-MM-dd HH:mm:ss
# timezone
time-zone: GMT+8
# serialization settings
serialization:
# pretty print output
indent-output: false
# ignore unconvertible o ...
Posted on Thu, 14 May 2026 23:11:37 +0000 by svguerin3