Look at what the platform opens, not just what you deploy
The app on :8080 is rarely the whole attack surface. Enumerate every listener the server itself owns.
Tag: appsec
Two roads to remote code execution in WildFly: a pre-auth CORBA deserialization bug and a JSON parser bypass
A deep security research writeup of two independent remote code execution paths into WildFly application servers: an unauthenticated IIOP/CORBA deserialization flaw, and a jackson-databind polymorphic typing bypass in the web tier. Full technical tracing, discovery story, and working proof of…