Finding classes for exploiting Unsafe Reflection / Unchecked Class Instantiation vulnerabilities in Java with Joern
blog.convisoappsec.com
During a penetration test, we found a Java application vulnerable to insecure reflection. How could we automate the process to find good classes?