Post from 2024-03-19 13:43:13

[RSS] Java deserialization tricks

https://www.synacktiv.com/en/publications/java-deserialization-tricks

This is mostly about defense evasion and post-exploitation.