Meet the Author
Jake Miller Security Researcher
Jake Miller (OSCE, OSCP) is a Bishop Fox alumnus and former lead researcher. While at Bishop Fox, Jake was responsible for overseeing firm-wide research initiatives. He also produced award-winning research in addition to several popular hacking tools like RMIScout and GitGot.
Hacking Tools:
- RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Execution
- Lessons Learned on Brute-forcing RMI-IIOP With RMIScout
- h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)
- GadgetProbe: Exploiting Deserialization to Brute-Force the Remote Classpath
- GitGot Tool Release
- Going Semi-Automated in an Automated World: Using Human-in-the-Loop Workflows to Improve Our Security Tools
Security Research:
- An Exploration of JSON Interoperability Vulnerabilities
- Design Considerations for Secure GraphQL APIs
- Design Considerations for Secure Cloud Deployment
- Server-Side Spreadsheet Injection - Formula Injection to Remote Code Execution
Security Advisories:
- OOB to RCE: Exploitation of the Hobbes Functional Interpreter
- Twisted Version 19.10.0
- Cisco Jabber Guest Server HTTP URL Redirection Vulnerability
Industry Blogs:
Posts from Jake Miller
Feb 25, 2021
An Exploration of JSON Interoperability Vulnerabilities
Jan 26, 2021
Google Partner Program – GPP Top 10
Dec 08, 2020
Lessons Learned on Brute-forcing RMI-IIOP With RMIScout
Oct 06, 2020
Defining the Scope of Your Pen Test
Sep 28, 2020
Design Considerations for Secure GraphQL APIs
Sep 15, 2020
Design Considerations for Secure Cloud Deployment
Sep 08, 2020
h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)
Aug 25, 2020
What Makes a Good Penetration Test?
Aug 19, 2020
20 Tips on How to Make the Most of Your Pen Test
Jun 12, 2020
OOB to RCE: Exploitation of the Hobbes Functional Interpreter
May 26, 2020
RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Execution
Mar 11, 2020
Twisted Version 19.10.0
Feb 17, 2020
GadgetProbe: Exploiting Deserialization to Brute-Force the Remote Classpath
Jul 18, 2019
Going Semi-Automated in an Automated World: Using Human-in-the-Loop Workflows to Improve Our Security Tools
Jul 18, 2019
GitGot Tool Release
Jun 11, 2018
Server-Side Spreadsheet Injection - Formula Injection to Remote Code Execution
Dec 21, 2016
Cisco Jabber Guest Server HTTP URL Redirection Vulnerability
