J2EE

Pentesting Java/J2EE, finding remote holes (2006)

HITB Security Conference Malaysia (2006) Video : HITB : Free Download, Borrow, and Streaming : Internet Archive
Welcome Address: Mohd. Ali Hanafiah (Head of Content, Consumer and Network Security, MCMC) Keynote Address: Schneier on Security (LIVE VIA WEBCAST) Bruce...
Internet Archive

Tools

frohoff/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. - frohoff/ysoserial
frohoffGitHub