Logo
Explore Help
Register Sign In
weyne/PayloadsAllTheThings
1
0
Fork 0
You've already forked PayloadsAllTheThings
mirror of https://github.com/weyne85/PayloadsAllTheThings.git synced 2025-10-29 16:57:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
PayloadsAllTheThings/Insecure deserialization/README.md
Swissky 82d4ff6c1d References added based on @ngalongc bug-bounty-references
2018-12-25 16:10:15 +01:00

2.3 KiB
Raw Blame History

Insecure Deserialization

Serialization is the process of turning some object into a data format that can be restored later. People often serialize objects in order to save them to storage, or to send as part of communications. Deserialization is the reverse of that process -- taking data structured from some format, and rebuilding it into an object - OWASP

Check the following sub-sections, located in other files :

  • Java deserialization : ysoserial, ...
  • PHP (Object injection) : phpggc, ...
  • Ruby : universal rce gadget, ...
  • Python : pickle, ...

References

  • Github - ysoserial
  • Java-Deserialization-Cheat-Sheet - GrrrDog
  • Understanding & practicing java deserialization exploits
  • How i found a 1500$ worth Deserialization vulnerability - @D0rkerDevil
  • Misconfigured JSF ViewStates can lead to severe RCE vulnerabilities - 14 Aug 2017, Peter Stöckli
  • PHP Object Injection - OWASP
  • PHP Object Injection - Thin Ba Shane
  • PHP unserialize
  • PHP Generic Gadget - ambionics security
  • RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN - elttam, Luke Jahnke
  • Java Deserialization in manager.paypal.com by Michael Stepankin
  • Instagram's Million Dollar Bug by Wesley Wineberg
  • (Ruby Cookie Deserialization RCE on facebooksearch.algolia.com by Michiel Prins (michiel)
  • Java deserialization by meals
Powered by Gitea Version: 1.23.8 Page: 13ms Template: 1ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API