Hiding payloads in Java source code strings
CYBERSECURITY FEATURED ANALYSIS

Hiding payloads in Java source code strings

SOURCE

PortSwigger Research

DATE

READ

1 min read

In this post we’ll show you how Java handles unicode escapes in source code strings in a way you might find surprising - and how you can abuse them to conceal payloads. We recently released a powerful

In this post we’ll show you how Java handles unicode escapes in source code strings in a way you might find surprising - and how you can abuse them to conceal payloads. We recently released a powerful