Resources

Cheatsheets
Deserialization
HackTricks
Java-Deserialization-Cheat-Sheet/README.md at master · GrrrDog/Java-Deserialization-Cheat-Sheet
GitHub
Ysoserial Bruteforcer
SerialBrute/SerialBrute.py at master · NickstaDB/SerialBrute
GitHub
Articles
https://www.coalfire.com/The-Coalfire-Blog/Sept-2018/Exploiting-Blind-Java-Deserialization
www.coalfire.com
Tricking blind Java deserialization for a treat
Security Café
Java Deserialization Attacks with Burp
NetSPI
Vulnerable Java Deserialization Lab Set Up For Practice Exploitation | The Dark Source
The Dark Source
​

Practice

.NET

Last modified 2yr ago