THREAT OPS › Threat News › Java Spring Boot "heapdump" scans, (Mon, Jul 27th)
Java Spring Boot "heapdump" scans, (Mon, Jul 27th)
Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a binary heapdump that can be used to analyze the current state of the application. Non-Java readers may be familiar with a similar concept, core dumps, which are produced by binaries to expose a memory image at the time the s
Original source: https://isc.sans.edu/diary/rss/33188