I'm interested in the world of Cyber Security and the role that Java development plays within it. Is Java used as a language for carrying out pen testing for instance? If anyone has any pointers or useful links to how Java is used within Cyber Security, then could they please post them in reply?

closed as too broad by S.L. Barth, Steffen Ullrich, AJ Henderson, Steve, schroeder Oct 3 '17 at 14:49

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 3
    Any programming language can be used for any task. It's more of a question of whether the language meets the needs of the goal. – schroeder Oct 3 '17 at 14:50
  • For about a decade Java 'sandbox' played the role of much-of-the-time highly-dangerous vector requiring thousands of websites to continuously issue advisories on blocking disabling and removing Java; now that applets have been exterminated, it plays the role of causing palpitations in people who experienced the last decade and bloating checklists of stale threats to waste resources on. </snark> in case that wasn't obvious. – dave_thompson_085 Oct 4 '17 at 4:02

Yes, it is used occasionally for the development of penetration testing tools, such as Burp proxy, but generally Python is more preferred in the security community.

What is particularly interesting about Java from a security perspective are vulnerabilities that are particular to Java, such as deserialization and remote method invocation vulnerabilities. Of course, other languages have those vulnerabilities as well, but they seem to be more important for Java.


Not the answer you're looking for? Browse other questions tagged or ask your own question.