Deserialization vulns

Deserialization vulns

Aleksei "GreenDog" Tiurin

Basics:

Class -> Object

Properties Methods

Deserialization vulns

Serialization / Deserialization. What is it?

Deserialization vulns

Pic from

Deserialization vulns

Various representations of objects: - JSON - XML - YAML - Binary -...

Java has ~ 30 libs (formats, speed, capabilities, size, etc)

Easy, at first glance?

Deserialization vulns

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download

To fulfill the demand for quickly locating and searching documents.

It is intelligent file search solution for home and business.

Literature Lottery