3rd OWASP Stuttgart Chapter Stammtisch

Exploiting deserialization vulnerabilities in recent Java versions

Due to attack techniques such as Insecure Deserialization and JNDI Injection, Java applications were prime targets for attackers. However, recent changes in Java have rendered many known exploits and attack patterns ineffective in newer versions. This talk will provide an overview of these changes and discuss which techniques are still viable. Additionally, we will discuss how to harden existing Java applications that run on current Java versions.

Agenda (Subject to Change):

• 6:00 PM: Arrival
• 6:30 PM - 7:30 PM: Presentation
• 7:30 PM - approximately 9:00 PM: Barbecue, drinks, discussion, and networking