2:06PoC Exploiting struts2-rest XStream Deserialization with Reverse Shelljoaomatosf1.8K viewsView & Download
45:26Unsafe Deserialization Attacks In Java - Apostolos GiannakidisOWASP London1.8K viewsView & Download
34:28Deserialization: what, how and why [not] - Alexei Kojenov - AppSecUSA 2018OWASP Foundation11.0K viewsView & Download
22:10Preventing Deserialization attacks in Java applicationslinux conf au 2017 - Hobart, Australia1.9K viewsView & Download
14:43Developing a custom Gadget chain for Java deserialization - Burp Suite Certified practitionerDaniel Redfern698 viewsView & Download
50:09Matthias Kaiser - Exploiting Deserialization Vulnerabilities in JavaMarcus Niemietz (HackPra)27.8K viewsView & Download
19:50Struts 2 Must Die The Life and Inevitable Death of Java’s Spaghettiest™ Framework EUGENE ROJAVSKIOWASP Foundation535 viewsView & Download
48:36Pwning Your Java Messaging With Deserialization VulnerabilitiesBlack Hat4.5K viewsView & Download