AWAE - OSWE Preparation / Resources
  • TL;DR
  • General
    • Resources
      • BurpSuite
      • WhiteBox
    • POCs
      • Deserialization
        • PHP
        • Java
          • Ysoserial
      • SQL Injection
      • Type Juggling
      • CSRF
  • By Vulnerability
    • SQL Injection
      • Summary
      • Types
      • Injection by clause
      • Bypassing Character Restrictions
      • By Language
        • JAVA
          • Regex
          • Summary
      • Regex
      • Resources
    • Deserialization
      • By Language
        • PHP
          • Regex
          • Summary
          • Practice
        • JAVA
          • Regex
          • Summary
          • Practice
          • Resources
        • .NET
          • Regex
          • Summary
          • Resources
      • Resources
    • XSS
    • XXE
      • By Language
        • PHP
          • Practice
          • Resources
        • Java
          • Vulnerable Libraries' Implementation
      • Resources
    • SSTI
      • Summary
      • Practice
      • Resources
    • File Upload Restrictions Bypass
      • Tricks
      • File Extension Filters Bypass List
      • Resources
  • REGEX
  • By Language
    • PHP
      • Regex
      • Type Juggling
        • Summary
        • Practice
    • Java
      • Decompiling
      • Compiling & Running
    • NodeJS
      • Practice
  • Random
  • Other Repositories
Powered by GitBook
On this page
  • Cheatsheets
  • Ysoserial Bruteforcer
  • Articles

Was this helpful?

  1. By Vulnerability
  2. Deserialization
  3. By Language
  4. JAVA

Resources

PreviousPracticeNext.NET

Last updated 4 years ago

Was this helpful?

Cheatsheets

Ysoserial Bruteforcer

Articles

DeserializationHackTricks
Java-Deserialization-Cheat-Sheet/README.md at master · GrrrDog/Java-Deserialization-Cheat-SheetGitHub
SerialBrute/SerialBrute.py at master · NickstaDB/SerialBruteGitHub
https://www.coalfire.com/The-Coalfire-Blog/Sept-2018/Exploiting-Blind-Java-Deserializationwww.coalfire.com
Tricking blind Java deserialization for a treatSecurity Café
Java Deserialization Attacks with BurpNetSPI
Logo
Vulnerable Java Deserialization Lab Set Up For Practice Exploitation | The Dark SourceThe Dark Source
Logo
Logo
Logo
Logo
Logo