> For the complete documentation index, see [llms.txt](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/by-vulnerability/deserialization/by-language/java/regex.md).

# Regex

```
(.*readObject\(.*|java.beans.XMLDecoder|com.thoughtworks.xstream.XStream|.*\.fromXML\(.*\)|com.esotericsoftware.kryo.io.Input|.readClassAndObject\(.*|.readObjectOrNull\(.*|com.caucho.hessian.io|com.caucho.burlap.io.BurlapInput|com.caucho.burlap.io.BurlapOutput|org.codehaus.castor|Unmarshaller|jsonToJava\(.*|JsonObjectsToJava\/.*|JsonReader|ObjectMapper\(|enableDefaultTyping\(\s*\)|@JsonTypeInfo\(|readValue\(.*\,\s*Object\.class|com.alibaba.fastjson.JSON|JSON.parseObject|com.owlike.genson.Genson|useRuntimeType|genson.deserialize|org.red5.io|deserialize\(.*\,\s*Object\.class|\.Yaml|\.load\(.*|\.loadType\(.*\,\s*Object\.class|YamlReader|com.esotericsoftware.yamlbeans)
```

## List

* `.*readObject\(.*`
* `java.beans.XMLDecoder`
* `com.thoughtworks.xstream.XStream`
* `.*\.fromXML\(.*\)`
* `com.esotericsoftware.kryo.io.Input`
* `.readClassAndObject\(.*`
* `.readObjectOrNull\(.*`
* `com.caucho.hessian.io`
* `com.caucho.burlap.io.BurlapInput`
* `com.caucho.burlap.io.BurlapOutput`
* `org.codehaus.castor`
* `Unmarshaller`
* `jsonToJava\(.*`
* `JsonObjectsToJava\/.*`
* `JsonReader`
* `ObjectMapper\(`
* `enableDefaultTyping\(\s*\)`
* `@JsonTypeInfo\(`
* `readValue\(.*\,\s*Object\.class`
* `com.alibaba.fastjson.JSON`
* `JSON.parseObject`
* `com.owlike.genson.Genson`
* `useRuntimeType`
* `genson.deserialize`
* `org.red5.io`
* `deserialize\(.*\,\s*Object\.class`
* `\.Yaml`
* `\.load\(.*`
* `\.loadType\(.*\,\s*Object\.class`
* `YamlReader`
* `com.esotericsoftware.yamlbeans`