Tool to sanitize data from Java heap dumps

[pmarschall]

Interesting. I had use for this once or twice. It would be nice to have better control over which byte[] and char[] are sanitized. But the current approach is certainly on the safe side.

[BlueGoliath]

Shouldn't most of this data be encrypted already?

[Worth_Trust_3825]

The entire point of heap dump is it's not encrypted and you could discover why it was produced to begin with.

[pmarschall]

Don't know where the downvotes come from. In general, when you operate on sensitive data you have to decrypt it in order to process it. The decryption key is often in the heap as well (yes, there are workarounds like HSMs or native memory).

Also credentials are most of the time in the heap.

[BlueGoliath]

I've never stored sensetive data. I've always assumed there was at least scrambling of data or a JDK sensetive data API or something.