RSSAmplifier

Blog

Wouter Coekaerts

Wouter Coekaerts personal site

wouter.coekaerts.beRSS feed ↗10 posts

Latest posts

FlowTracker - Track data flowing through Java programs

Announcing FlowTracker: a Java agent that tracks data flowing through Java programs

Breaking java.lang.String

Let's abuse a bug in java.lang.String

Java Puzzle 10: No Dot - Solution

Java challenge: Write Hello World without using a dot, backslash, or semicolon

The Java type system is broken

The Java type system is broken

More serialization hacks with AnnotationInvocationHandler

In this post we take a look at two Java serialization vulnerability gadgets

Java Puzzle 9: Tweet - Solution

Java puzzle, write A to win: class B extends A{B(Long i){new B(i/Long.compare(i,i));System.out.println("Win");}}

Java Puzzle 9: Tweet

Short but challenging, a puzzle that fits in a tweet, exploring the power a superclass has over its subclass

Resurrecting a PhantomReference

In this post, you'll learn about Java necromancy: how to resurrect objects back from the dead. We will abuse a recently fixed security bug in the JDK to trick the garbage collector to get ahold of an object to which no living object should have a connection.

Java Puzzle 7: Cookies - Solution

Here's the solution to the cookies puzzle!

Java Puzzle 7: Cookies

Learn how to count down with Count von Count and Cookie Monster!