Will Giles | Cybersecurity·3d agoInsecure Deserialization: How to Turn Trusted Data Into a Reverse ShellA hands-on lab walkthrough against PHP and Java web targets
Bhanvararam choudhary·Sep 22Mastering Insecure Deserialization: A Complete PortSwigger Lab WriteupFrom basic cookie manipulation to custom gadget chains in PHP, Java, and Ruby (Apprentice to Expert).
L4ZZ3RJ0D·Sep 18Jax Sucks Alot (THM) Walkthrough“In JavaScript, everything is a terrible mistake.” Horror LLC said it themselves, right there in the brief, and by the end of this room I…
CYBER MIND SPACE·Aug 21Deserialization Vulnerabilities: Why Untrusted Objects Can Become DangerousThe server was told to reconstruct an object. It did. While reconstructing it, it ran code. That’s the whole attack.
İlteriş Kaan Pehlivan·Aug 18Aegis Corp: Leaked MachineKeyRoom: Aegis Corp: Leaked MachineKey Difficulty: Medium Category: Web Exploitation / Deserialization Author: ikpehlivan
bovsec·Aug 18Verinin Gölge Tarafı: Insecure Deserialization Zafiyetini Anlamak ve SömürmekVerinin Gölge Tarafı: Insecure Deserialization Zafiyetini Anlamak ve Sömürmek
Sakarya Üniversitesi Siber Güvenlik Topluluğu·Aug 10Adım Adım Insecure Deserialization Zafiyeti ve Çözüm YollarıHazırlayan: Burak Demir — Düzenleyen: Yunus Emre Şahin
InMeetCyberbyBash Overflow·Jul 23[IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and…The source leaked. Read it like an attacker, chain the flaws, and compromise the Spring Boot application.A response icon1A response icon1
PRiTi.EX·Jul 19Lab: Exploiting Java deserialization with Apache Commons (Insecure Deserialization)#lab 5Solution: