Serialization is currently one of the hot topic in web security. This badge covers the exploitation of serialization vulnerabilities in multiple languages
- Java
- Completed by 862 students
XMLDecoder
This exercise covers the exploitation of an application using XMLDecoder
- Java/Tomcat
- Completed by 731 students
CVE-2016-0792
This exercise covers the exploitation of an Xstream vulnerability in Jenkins
- 1 video
- Java
- Completed by 717 students
ObjectInputStream
This exercise covers the exploitation of a call to readObject in a Spring application
- Rails
- Completed by 605 students
CVE-2013-0156
This exercise covers the exploitation of a code execution in Ruby-on-Rails using XML and YAML.
- 6 videos
- PHP/Apache/Mysql
- Completed by 537 students
API to Shell
This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.