gredler/aegis4j
View on GitHub ↗ ★ 16 Java
A Java agent that disables platform features you don't use, before an attacker uses them against you.
3 mentions on Hacker News by 1 person: 1 story, 2 comments · first 2021-12-16 · latest 2021-12-28
20082026
-
…don't use, before an attacker uses them against you (including e.g. JNDI and Java serialization). https://github.com/gredler/aegis4j/
comment by jet390 · 2021-12-28 · in New Log4j2 vulnerability -
…forego platform features like JNDI, serialization or native process execution. Link to the project: https://github.com/gredler/aegis4j It's not a lot of code, but it uses parts of the platform that I think are a bit unusual for most devs,…
comment by jet390 · 2021-12-16 · in Log4j 2.15.0 – Previously suggested mitigations may not be enough -
▲ 5
Aegis4j: Avoid the Next Log4Shell Vulnerabilitystory by jet390 · 2021-12-16 · 0 comments