Resources

Cheatsheets

Page not found - HackTricksbook.hacktricks.xyz

Java-Deserialization-Cheat-Sheet/README.md at master · GrrrDog/Java-Deserialization-Cheat-SheetGitHub

Ysoserial Bruteforcer

SerialBrute/SerialBrute.py at master · NickstaDB/SerialBruteGitHub

Articles

https://twitter.com/jorge_ctf/status/1285240301620273156twitter.com

Exploiting Blind Java Deserialization with Burp and YsoserialCoalfire

Tricking blind Java deserialization for a treatSecurity Café

Java Deserialization Attacks with BurpNetSPI

https://www.thedarksource.com/java-deserialization-vulnerability-detection-and-exploitation-burp-suite/www.thedarksource.com