Cybersecurity
Deserialization
Hunt insecure deserialization (CWE-502) across Python pickle, Java ObjectInputStream / Jackson / SnakeYAML, .NET BinaryFormatter / DataContractJson, PHP unserialize, Ruby Marshal/YAML.load, and Node.js vm. Direct path to unauthenticated RCE.
- Publisher / source
- BitterSecurity/Decepticon (found on GitHub top repositories)
- Upstream record
- BitterSecurity/Decepticon
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
56e7652efc23d7b5d0b4dcd057a55cf09b8a8998ab884b100cc6c5059c2a55fb