Intelligence View

⚡ tsecurity.de Intelligence

springboot.firststeps(P2)

peliculaController.java package es.taw.movies.controller; import es.taw.movies.dao.*; import es.taw.movies.entity.MovieCast; import es.taw.movies.entity.MovieCrew; import es.taw.movies.entity.Movies; import…

Sichere Programmierung dev.to 23.06.2025, 23:06 Uhr 6 Min. Lesezeit Cloud & IT-Enterprise

↗ Quelle (dev.to)

Reagiere als Erste:r — dein Feedback zählt!

peliculaController.java

package es.taw.movies.controller;





import es.taw.movies.dao.*;

import es.taw.movies.entity.MovieCast;

import es.taw.movies.entity.MovieCrew;

import es.taw.movies.entity.Movies;

import es.taw.movies.ui.Filtro;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Controller;

import org.springframework.ui.Model;

import org.springframework.web.bind.annotation.GetMapping;

import org.springframework.web.bind.annotation.ModelAttribute;

import org.springframework.web.bind.annotation.PostMapping;

import org.springframework.web.bind.annotation.RequestParam;



import java.util.List;



@Controller

public class PeliculaController {



    @Autowired

    ProductionCompaniesRepository productionCompaniesRepository;

    @Autowired

    MoviesRepository moviesRepository;

    @Autowired

    SpokenLanguagesRepository spokenLanguagesRepository;

    @Autowired

    MovieCastRepository movieCastRepository;

    @Autowired

    MovieCrewRepository movieCrewRepository;



    protected String listarConFiltro(Filtro filtro, Model model){

        List<Movies> peliculas;

        if(filtro== null || filtro.getProductoras().isEmpty()){

            filtro = new Filtro();

            peliculas = moviesRepository.findAll();

        } else {

            peliculas = moviesRepository.findByProductionCompaniesList(filtro.getProductoras());

        }

        model.addAttribute("peliculas", peliculas);

        model.addAttribute("productoras", productionCompaniesRepository.findAll());

        model.addAttribute("filtro", filtro);

        return "peliculas";

    }



    @GetMapping("/")

    public String doListar(Model model){

        return listarConFiltro(null, model);



//        model.addAttribute("productoras", productionCompaniesRepository.findAll());

//        model.addAttribute("filtro", new Filtro());

//        model.addAttribute("peliculas", moviesRepository.findAll());

//

//        return "peliculas";

    }



    @PostMapping("/filtrar")

    public String doFiltrar(Model model, @ModelAttribute("filtro")Filtro filtro){

        return listarConFiltro(filtro, model);

//        List<Movies> peliculas;

//        if(!filtro.getProductoras().isEmpty()){

//            peliculas = moviesRepository.findByProductionCompaniesList(filtro.getProductoras());

//        }else {

//            peliculas = moviesRepository.findAll();

//        }

//

//        model.addAttribute("peliculas", peliculas);

//        model.addAttribute("productoras", productionCompaniesRepository.findAll());

//        model.addAttribute("filtro", filtro);

//        return "peliculas";

    }



    @GetMapping("/editar")

    public String doEditar(@RequestParam("id")Integer id, Model model){

        Movies pelicula = moviesRepository.findById(id).orElse(null);

        model.addAttribute("pelicula", pelicula);



        model.addAttribute("idiomas", spokenLanguagesRepository.findAll());



        return "pelicula";

    }



    @PostMapping("/guardar")

    public String doGuardar(Model model, @ModelAttribute("pelicula")Movies pelicula){

        Movies peliculaEdit = moviesRepository.findById(pelicula.getId()).orElse(null);

        peliculaEdit.setTitle(pelicula.getTitle());

        peliculaEdit.setReleaseDate(pelicula.getReleaseDate());

        peliculaEdit.setSpokenLanguagesList(pelicula.getSpokenLanguagesList());

        peliculaEdit.setOverview(pelicula.getOverview());

        moviesRepository.save(peliculaEdit);

        return "redirect:/";

    }



    @GetMapping("/reparto")

    public String doReparto(@RequestParam("id")Integer id, Model model){

        Movies pelicula = moviesRepository.findById(id).orElse(null);



        List<MovieCast> reparto = movieCastRepository.findByPeliculaId(id);



        model.addAttribute("reparto", reparto);

        model.addAttribute("pelicula", pelicula);

        model.addAttribute("idiomas", spokenLanguagesRepository.findAll());



        return "pelicula";

    }



    @GetMapping("/trabajadores")

    public String doTrabajos(@RequestParam("id")Integer id, Model model){

        Movies pelicula = moviesRepository.findById(id).orElse(null);



        List<MovieCrew> trabajos = movieCrewRepository.findByPeliculaId(id);



        model.addAttribute("trabajos", trabajos);

        model.addAttribute("pelicula", pelicula);

        model.addAttribute("idiomas", spokenLanguagesRepository.findAll());



        return "pelicula";

    }

}

Vista

pelicula.jsp

<%@ page import="es.taw.movies.entity.Movies" %>

<%@ page import="java.util.List" %>

<%@ page import="es.taw.movies.entity.MovieCast" %>

<%@ page import="es.taw.movies.entity.MovieCrew" %>

<%@ taglib prefix="form" uri="http://www.springframework.org/tags/form" %>

<%@ page contentType="text/html;charset=UTF-8" language="java" %>

<html>



<%

    String title = "Ficha de la Película";

    Movies pelicula = (Movies) request.getAttribute("pelicula");

%>



<head>

    <title><%=title%></title>

</head>

<body>

<h1><%=title%></h1>



<table border="1">

    <tr>

        <td>

            <form:form modelAttribute="pelicula" method="post" action="/guardar">

                <table>

                    <form:hidden path="id"/>

                    <tr>

                        <td>Título:</td>

                        <td><form:input path="title"/></td>

                    </tr>

                    <tr>

                        <td>Fecha:</td>

                        <td><form:input path="releaseDate"/></td>

                    </tr>

                    <tr>

                        <td>Idiomas:</td>

                        <td><form:checkboxes path="spokenLanguagesList" items="${idiomas}" itemLabel="name"/></td>

                    </tr>

                    <tr>

                        <td>Sinopsis:</td>

                        <td><form:textarea path="overview" cols="100" rows="5"/></td>

                    </tr>

                </table>

                <form:button>Guardar</form:button>

            </form:form>

        </td>

        <td>

            <a href="/reparto?id=<%=pelicula.getId()%>" >Reparto</a> -

            <a href="/trabajadores?id=<%=pelicula.getId()%>" >Trabajadores</a> <br>



            <%

                List<MovieCast> reparto = (List<MovieCast>) request.getAttribute("reparto");

                List<MovieCrew> trabajos = (List<MovieCrew>) request.getAttribute("trabajos");

                if(reparto!=null){

                    %>

            <h1>Reparto</h1> <br>

            <%

                    for (MovieCast r : reparto){

            %>



                        <%=r.getCharacterName()%> - <%=r.getPersonId().getName()%> <br>

            <%

                    }

                } else if (trabajos!=null) {

                    %>

            <h1>Trabajadores</h1> <br>

            <%

                    for (MovieCrew t : trabajos){

            %>



                        <%=t.getJob()%> - <%=t.getPersonId().getName()%> <br>

            <%

                    }

                }

            %>



        </td>

    </tr>

</table>







</body>

</html>

peliculas.jsp

<%@ page import="es.taw.movies.entity.Movies" %>

<%@ page import="java.util.List" %>

<%@ page import="es.taw.movies.entity.SpokenLanguages" %>

<%@ taglib prefix="form" uri="http://www.springframework.org/tags/form" %>

<%@ page contentType="text/html;charset=UTF-8" language="java" %>

<html>



<%

    String title = "Peliculas";

    List<Movies> peliculas = (List<Movies>) request.getAttribute("peliculas");

%>



<head>

    <title><%=title%></title>

</head>

<body>

<h1><%=title%></h1>



<form:form modelAttribute="filtro" method="post" action="/filtrar">

    <table border="1">

        <tr>

            <th>PRODUCTORAS</th>

            <th>PELÍCULAS</th>

        </tr>

        <tr>

            <td>

                <form:checkboxes path="productoras" items="${productoras}" itemLabel="name" delimiter="<br>"/>

            </td>

            <td>

                <%

                for(Movies p : peliculas){

                %>

                <a href="/editar?id=<%=p.getId()%>"> <%=p.getTitle()%> </a> - (

                <%

                    for(SpokenLanguages s : p.getSpokenLanguagesList()){

                    %>



                    <%=s.getName()%>



                    <%

                    }

                    %>

                    )<br>

                <%

                }

                %>

            </td>



        </tr>

    </table>

    <form:button>Filtrar</form:button>

</form:form>



</body>

</html>

Repos

buscar una lista en una lista

package es.taw.movies.dao;



import es.taw.movies.entity.Movies;

import org.springframework.data.jpa.repository.JpaRepository;

import org.springframework.data.jpa.repository.Query;

import org.springframework.data.repository.query.Param;



import java.util.List;



public interface MoviesRepository extends JpaRepository<Movies, Integer> {



    @Query("select m from Movies m join m.productionCompaniesList p where p.id in :productoras")

    public List<Movies> findByProductionCompaniesList(@Param("productoras")List<Integer> productoras);



}

public interface MovieCrewRepository extends JpaRepository<MovieCrew, Integer> {



    @Query("select crew from MovieCrew crew where crew.movieId.id = :id")

    public List<MovieCrew> findByPeliculaId(@Param("id")Integer id);

}

ui(Filtro)

package es.taw.movies.ui;





import lombok.Data;



import java.util.List;



@Data

public class Filtro {

    List<Integer> productoras;

}

IR-PLAYBOOK-VULN-REMEDIATIONMEDIUM

Schritte anzeigen

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Sigma & YARA RulesSOC Ready

Regeln anzeigen

title: Detect Exploitation - springboot.firststeps(P2)
id: 3aa99050-b56b-4844-bd1e-da51a626d41a
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "springboot.firststeps(P2)" ascii wide
    condition:
        any of them
}

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

Digitale Ausgabe: Die Top-Themen von AUTOHAUS 12/2025

IT Security Nachrichten

NÄCHSTER BEITRAG 5 Min

springboot.firststeps(P1)

Sichere ProgrammierungWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich springboot.firststeps(P2).... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

springboot.firststeps(P2)

Vista

Repos

ui(Filtro)

SOC Incident Playbook: Vulnerability Remediation & Verification

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten springboot.firststeps(P2)

Before You Move the Robot, Prove You’re Talking to the Right Robot

Zwei Probleme in freeciv (Fedora)

A self-hostable AI workstation with a coding agent and answer-checking (Flywheel 1.0.1)

xalgorix v4.6.78

Security: Zwei Probleme in freeciv (Fedora)

firefox-devtools-mcp v0.10.3

tsecurity.de App

tsecurity.de Live Threat Radar

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen

🔖 Gespeicherte Artikel

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

springboot.firststeps(P2)

Vista

Repos

ui(Filtro)

SOC Incident Playbook: Vulnerability Remediation & Verification

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten springboot.firststeps(P2)

Before You Move the Robot, Prove You’re Talking to the Right Robot

Zwei Probleme in freeciv (Fedora)

A self-hostable AI workstation with a coding agent and answer-checking (Flywheel 1.0.1)

xalgorix v4.6.78

Security: Zwei Probleme in freeciv (Fedora)

firefox-devtools-mcp v0.10.3

tsecurity.de App

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

Community Radar & Live Chat

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

🔖 Gespeicherte Artikel

Heiß diskutierte Einreichungen