Notes on security, code, and other things I find interesting.

Here you can find some of the things I find interesting and some of the things I've been working on.

Showing 1 post tagged vulnerability-research

February 18, 20255 min read

How RCE Works - and How I Found One in IriusRisk's Drools Engine

A technical walkthrough of remote code execution, why rule engines are dangerous attack surfaces, and how a custom Drools rules menu became a Java code injection vector.

security rce vulnerability-research drools