Cybersecurity
Java Deserialization Methodology
Java 反序列化漏洞检测与利用。当目标是 Java 应用（Tomcat/Spring/WebLogic/JBoss/Jenkins）、发现 rO0AB/aced0005 开头的 Base64 数据、HTTP 请求中有 application/x-java-serialized-object Content-Type、或存在 T3/IIOP/RMI/JNDI 协议端口时使用。覆盖 ysoserial gadget chain、JNDI 注入、Fastjson/Jackson 反序列化、Shiro rememberMe、常见中间件 CVE 利用
- Publisher / source
- wgpsec/AboutSecurity (found on GitHub top repositories)
- Upstream record
- wgpsec/AboutSecurity
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
2ab739b649242adf8c0c611357300e178f2918e31b90c3a0984573b24d51872e