[In]secure Deserialization, And How [Not] To Do It
Alexei Kojenov analyzes [In]secure Deserialization, And How [Not] To Do It.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Videos·39 min
Alvaro Muñoz
Alvaro Muñoz analyzes Attacking .NET deserialization.
deserializationattackingvulnerability-research
Main Stage·35 min
Jonathan Birch
Jonathan Birch demonstrates novel .NET deserialization RCE attacks that bypass standard assumptions, exploiting database drivers and immutable data streams.
dotnetdeserializationrce+2
DIGIT·1 hr 22 min
Coverage of Scot Secure 2024 | Session 3 from the conference program.
scotsecurevulnerability-research