Course
This exercise covers bypassing blocklist-based deserialization filters using JdbcRowSetImpl. You will learn how JNDI lookups to attacker-controlled servers can be used as an alternative sink for remote code execution.
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.
