Course
This exercise covers the exploitation of a serialization issue in Java. Specifically, it focuses on building your own gadgets without relying on ysoserial to gain command execution via ObjectInputStream.
Skills covered
Injection
Included with PRO
Full course content
Common mistakes
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.