Serialize Badge

3199 Completed
11 Videos
5 Exercises

Serialization is currently one of the hot topic in web security. This badge covers the exploitation of serialization vulnerabilities in multiple languages

Exercises

Medium
XMLDecoder
  • This exercise covers the exploitation of an application using XMLDecoder
  • 1 video
  • Completed by 5232 students
  • Takes < 1 Hr. on average
  • Java

 

Medium
CVE-2016-0792
  • This exercise covers the exploitation of an Xstream vulnerability in Jenkins
  • 1 video
  • Completed by 4671 students
  • Takes < 1 Hr. on average
  • Java/Tomcat
  • CWE-20

 

Medium
ObjectInputStream
  • This exercise covers the exploitation of a call to readObject in a Spring application
  • 1 video
  • Completed by 4198 students
  • Takes < 1 Hr. on average
  • Java

 

Medium
CVE-2013-0156: Rails Object Injection
  • This exercise covers the exploitation of a code execution in Ruby-on-Rails using XML and YAML.
  • 2 videos
  • Completed by 3909 students
  • Takes < 1 Hr. on average
  • Rails
  • CWE-20

 

Hard
API to Shell
  • This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.
  • 6 videos
  • Completed by 3384 students
  • Takes 2-4 Hrs. on average
  • PHP/Apache/Mysql
  • API
  • CWE-502,CWE-310