#spring

Spring Actuator Security, Part 1: Stealing Secrets Using Spring Actuators

Spring is a set of frameworks for developing Applications in Java. It is widely used, and so it is not unusual to encounter it during a security audit or penetration test. One of its features that I recently encountered during a whitebox audit is act...