Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-13 14:52:53 +00:00
Code Issues Projects Releases Packages Wiki Activity
PayloadsAllTheThings/Insecure Deserialization
History
Swissky d88e32aaae .NET Deserialization
2022-10-11 21:52:46 +02:00
..
Files NodeJS Serialization 2022-09-23 11:21:29 +02:00
DotNET.md .NET Deserialization 2022-10-11 21:52:46 +02:00
Java.md YAML Deserialization 2022-09-16 16:37:40 +02:00
Node.md NodeJS Serialization 2022-09-23 11:21:29 +02:00
PHP.md Blind SSTI Jinja 2022-10-02 12:24:39 +02:00
Python.md Add warning about cPickle 2022-04-18 20:58:14 +02:00
README.md .NET Deserialization 2022-10-11 21:52:46 +02:00
Ruby.md YAML Deserialization 2022-09-16 16:37:40 +02:00
YAML.md Update YAML.md 2022-10-05 13:47:24 +02:00

README.md

Insecure Deserialization

Serialization is the process of turning some object into a data format that can be restored later. People often serialize objects in order to save them to storage, or to send as part of communications. Deserialization is the reverse of that process -- taking data structured from some format, and rebuilding it into an object - OWASP

Check the following sub-sections, located in other files :

Object Type Header (Hex) Header (Base64)
Java Serialized AC ED rO
.NET ViewState FF 01 /w
Python Pickle 80 04 95 gASV
PHP Serialized 4F 3A Tz

LABS

References