Attack Scenarios
In this article, we review possible ways how to inject malware code in JVM/to sniff JVMs traffic/etc. The key objective of this article is to explain how to protect your application. The plan is to perform the next attacks:
- Read sensitive data from the dump.
- Steal source code by injecting malware in an external dependency.
Stealing Data From Java Dump
If someone got access to the Java process he might be able to read sensitive information like passwords or database addresses. Let's take a look into the next DataSource configuration: