Course
This exercise covers the exploitation of a serialization issue in Java using the toString() method as a gadget trigger. You will learn how wrapper classes can invoke toString() during deserialization to achieve command execution.
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.
