Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
java-security-update — Audits Java JDK/JRE installations on Debian/Ubuntu via APT, reports packages and processes, then applies simulated, confirmation-gated security updates. | Kitploit
Tools/GitHubGitHub/carl0gonzalez/java-security-update
Defensive ToolsVulnerability AnalysisScripting & AutomationConfiguration AuditingMisconfigurationIncident Response
GitHubcarl0gonzalez/java-security-update

java-security-update

Audits Java JDK/JRE installations on Debian/Ubuntu via APT, reports packages and processes, then applies simulated, confirmation-gated security updates.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
13 days agoNot yet reviewed
Share

Java Security Update

Conservative tool for auditing Java installations on Ubuntu, Debian, and derivatives that use APT, particularly containerless iDempiere servers.

Audit from GitHub Raw (read-only)

curl -fsSL https://raw.githubusercontent.com/Carl0gonzalez/java-security-update/main/java-security-update.sh | bash -s -- --audit

If the Java installation uses non-standard paths, first download the script and run bash java-security-update.sh --audit --root /path.

Safe update

Do not run curl | sudo bash in production. Download, verify the hash published through an independent channel, and review the script before using administrative privileges:

curl -fsSLo java-security-update.sh https://raw.githubusercontent.com/Carl0gonzalez/java-security-update/main/java-security-update.sh
sha256sum java-security-update.sh
bash -n java-security-update.sh
less java-security-update.sh
bash java-security-update.sh --audit
sudo bash java-security-update.sh --apply

SHA-256 corresponding to the first published version:

63bab4224c681feda4b36206ee642848ed3e653870e6b766b86142c39f818173  java-security-update.sh

Behavior

  • --audit: discovers JDK/JRE binaries, vendors, locations, APT packages, and Java processes, without modifying the system.
  • --apply: queries available versions, simulates APT updates of already-installed Java packages and certificates, shows the plan, and requires typing ACTUALIZAR to continue.
  • It does not replace manual JDK installations and does not deliberately change major versions (11 to 17, for example).
  • It does not restart iDempiere by itself, although APT post-installation scripts could restart services. Schedule a maintenance window.
  • It does not guarantee that a particular CVE is mitigated. Verify Java vendor advisories and certificate stores.
  • Existing Java processes must be restarted in a controlled manner to load the updated JVM.
  • The SHA-256 stored alongside the script verifies integrity only if the expected value was obtained reliably; an attacker with control of the repository could replace both.

Local use

git clone [email protected]:Carl0gonzalez/java-security-update.git
cd java-security-update
sha256sum -c java-security-update.sh.sha256
bash java-security-update.sh --audit

The Raw file on main may change. In production, it is preferable to pin a known revision/commit and verify its SHA-256 through a different channel.

Download Tool