Shiro 550 Deserialization Vulnerability Analysis and Exploitation Techniques
Understanding the Shiro Framework 550 Deserialization Vulnerability
Environment Setup
Required components: Shiro source code, JDK 8, Tomcat
Vulnerability Root Cause
The vulnerability affects Shiro versions <= 1.2.24, though higher vertions may also be vulnerable if developers configure hardcoded keys. The security flaw exists in the Remember ...
Posted on Thu, 30 Jul 2026 17:02:25 +0000 by railanc4309
Server-Side Request Forgery Vulnerabilities and Exploitation Techniques
Understanding SSRF Attacks
Server-Side Request Forgery (SSRF) occurs when a application allows users to supply URLs or IP addresses that the server will then request data from. This vulnerability arises primarily when web applications provide functionality to fetch resources from external sources without properly validating or sanitizing the ta ...
Posted on Fri, 15 May 2026 07:54:12 +0000 by sincspecv