Detects potential JNDI Injection exploitation. Often coupled with Log4Shell exploitation.

Read More

Detects potential local file read vulnerability in JVM based apps. If the exceptions are caused due to user input and contain path traversal payloads then it's a red flag.

Read More

Detects potential OGNL Injection exploitation, which may lead to RCE. OGNL is an expression language that is supported in many JVM based systems. OGNL Injection is the reason for some high profile RCE's such as Apache Struts (CVE-2017-5638) and Confluence (CVE-2022-26134)

Read More

Detects XML parsing issues, if the application expects to work with XML make sure that the parser is initialized safely.

Read More

Detects process execution related exceptions in JVM based apps, often relates to RCE

Read More