The Startup
Published in

The Startup

Hacking Java Deserialization

How attackers exploit Java Deserialization to achieve Remote Code Execution

Need. Coffee. Now… Photo by Christiana Rivers on Unsplash

Insecure deserialization bugs are often very critical vulnerabilities: an insecure deserialization bug will often result in arbitrary code execution, granting attackers a wide range of capabilities on the application.

--

--

--

Get smarter at building your thing. Follow to join The Startup’s +8 million monthly readers & +756K followers.

Recommended from Medium

{UPDATE} Jogo dos Pastorinhos Hack Free Resources Generator

Foot-printing Methodologies : Information Enriched ! — Shahrukh A. Siddiqui

Referral ID in PointPay Banking App

The Vigilante Hackers Who Are Using Data to Save Human Trafficking Victims

Daiquilibrium — THE SHRINKQUILIBRIUM

REST framework Admin Panel bypass and how I recon for this vulnerability

Hack the box armageddon.htb

Remote Exploitation 101-Root The Box

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Vickie Li

Vickie Li

Professional investigator of nerdy stuff. Hacks and secures. Creates god awful infographics. https://twitter.com/vickieli7

More from Medium

Detecting, Investigating and Verifying Fixes for Security Incidents and Zero Day Issues Using…

Learning about Spring4Shell exploit

How to Compile and Run JUnit Test Class from Command Line

Java Inner Example -10 Program