Attacking .NET deserialization
Alvaro Muñoz analyzes Attacking .NET deserialization.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
OWASP Foundation·40 min
Alexei Kojenov
Alexei Kojenov analyzes [In]secure Deserialization, And How [Not] To Do It.
deserializationvulnerability-researchsecure
OWASP Global AppSec USA 2025·48 min
Join Jason as he
Outlines attacking AI and evaluates key implications for security practitioners.
attackingvulnerability-researchapplication-security+2
Main Stage·35 min
Jonathan Birch
Jonathan Birch demonstrates novel .NET deserialization RCE attacks that bypass standard assumptions, exploiting database drivers and immutable data streams.
dotnetdeserializationrce+2