Insecure Deserialization 7
- PortSwiggerlabs: Exploiting PHP deserialization with a pre-built gadget chain
- PortSwiggerlabs: Exploiting Ruby deserialization using a documented gadget chain
- PortSwiggerlabs: Exploiting Java deserialization with Apache Commons
- PortSwiggerlabs: Arbitrary object injection in PHP
- PortSwiggerlabs: Using application functionality to exploit insecure deserialization
- PortSwiggerlabs: Modifying serialized data types
- PortSwiggerlabs: Modifying serialized objects