21 May 2024
Just completed the "Tony the Tiger" room on @tryhackme! Learned about Java deserialization—new for me. Great experience! 🚀 #TryHackMe #CyberSecurity #JavaDeserialization #CTF #Learn
2
30
2 Nov 2023
More fun content from my fellow Labs researcher Thomas Hendrickson. This is a fun read if you're looking for how to handle some fairly restrictive payload size requirements as part of Java deserialization exploitation. #thornsftp #rce #cve202347174 #javadeserialization #ysoserial
2 Nov 2023
Our researchers were at it again, this time uncovering a Java deserialization vuln that led to unauthenticated RCE in the Thorn SFTP Gateway Admin portal. Check out the blog to learn how they did it: hubs.ly/Q027xtpp0 #rce #vulnerabilityresearch #thornsftp #securityexperts
3
447
Ermir - An Evil Java RMI Registry bit.ly/3WnUada #Ermir #java #JavaDeserialization #Wrapper #Ysoserial
2
2 Nov 2022
Ermir - An Evil Java RMI Registry bit.ly/3WnUada #Ermir #java #JavaDeserialization #Wrapper #Ysoserial
10
33
Ermir - An Evil Java RMI Registry dlvr.it/Sbxphg #Ermir #java #JavaDeserialization #Wrapper #Ysoserial via KitPloit
1
2
6 Dec 2021
@wabafet1 and I made a exploit for the Vcenter AMF Deserialization .
Full #Analysis Available here - @AttackerKb attackerkb.com/topics/5nZX40…
#exploit - github.com/dorkerdevil/LongT…
#JavaDeserialization
4
5
4 Sep 2021
Gososerial - Dynamically Generates Ysoserial’s Payload
#JavaDeserialization #Gososerial #Payload #Ysoserial
#SecurityTools #Pentesting
@Emrullah_A @D3pak @ADITYASHENDE17
reconshell.com/gososerial-dy…
1
5
5-minute countdown! Will we see you there? syn.ac/3t5txuo
#crowdsourcedsecurity #javadeserialization #java #cyber #cybersecurity #ethicalhacking #synacksecure #synack
1
2
12
11 Jun 2020
RMIScout - Wordlist And Bruteforce Strategies To Enumerate Java RMI Functions And Exploit RMI Parameter Unmarshalling Vulnerabilities feedproxy.google.com/~r/Pent… #Bruteforce #BruteforceAttacks #Bruteforcing #Java #JavaDeserialization #JavaRMI
1
2
Just finished the first run of the 4 day training #AdvancedJavaExploitation by @matthias_kaiser of @codewhitesec and learned loads about #ELInjection, #StrutsExploits, #JavaDeserialization and much more! Thanks for the awesome time!
1
6