THREATOPS
THREAT OPSThreat News › Java Spring Boot "heapdump" scans, (Mon, Jul 27th)

Java Spring Boot "heapdump" scans, (Mon, Jul 27th)

lowsans_iscPublished 2026-07-27

Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a binary heapdump that can be used to analyze the current state of the application. Non-Java readers may be familiar with a similar concept, core dumps, which are produced by binaries to expose a memory image at the time the s

Original source: https://isc.sans.edu/diary/rss/33188