Back to directory
WRITEUP #389

Java Deserialization Tricks

DeserializationInsecure deserializationRCESecurity code review
by@loadlow(Clément Amic)
Program
-
Published
Mar 19, 2024
Added to HackDex
May 8, 2024
Read Full Writeuphttps://www.synacktiv.com/en/publications/java-deserialization-tricks.html
RELATED WRITEUPS
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload
Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle
RCESecurity code review
WordPress GiveWP POP to RCE (CVE-2024-5932)
RCEPHP pop chain

Built with ❤️ by Shubham Rawat