IntermediateFREE10 hours
What Is Serialization? **Serialization** Is the Process of Converting Complex Da
// VULNERABLE: Direct use without allow-list
Enroll for free to track your progress through this course.
Curriculum (19 lessons)
- 1. What Is Serialization? **Serialization** Is the Process of Converting Complex Data Structu
- 2. What Is Insecure Deserialization?
- 3. How Do Insecure Deserialization Vulnerabilities Arise?
- 4. What Is the Impact of Insecure Deserialization?
- 5. How to Exploit Insecure Deserialization Vulnerabilities
- 6. How to Prevent Insecure Deserialization Vulnerabilities
- 7. Exploiting Insecure Deserialization Vulnerabilities
- 8. How to Identify Insecure Deserialization
- 9. Manipulating Serialized Objects
- 10. Using Application Functionality
- 11. Magic Methods
- 12. Injecting Arbitrary Objects
- 13. Gadget Chains a "Gadget" Is a Snippet of Code That Exists in the Application That Can Help
- 14. Creating Your Own Exploit
- 15. PHAR Deserialization
- 16. Exploiting Deserialization Using Memory Corruption
- 17. Best Practices & Detailed Takeaways
- 18. VULNERABLE
- 19. Insecure Deserialization