Black Hat·39 min
Presenters detail vulnerability discovery and exploitation in Automated Discovery of Deserialization Gadget Chains.
deserializationautomateddiscovery+3
deserialization
31 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 31 talks · loading…
Black Hat·40 min
Lachlan Davidson
Engineers explore architecture and security mechanisms for Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare.
javascriptdeserializationdiscovering+3
Black Hat·40 min
Industry experts analyze emerging threats surrounding How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain.
blockchaindeserializationjson+2
Black Hat·37 min
Bofei Chen · Yinzhi Cao · Lei Zhang · Xinyou Huang · Yuan Zhang · Min Yang
Engineers explore architecture and security mechanisms for JDD: In-depth Mining of Java Deserialization Gadget Chains.
deserializationminingin-depth+3
Black Hat·51 min
Presenters detail vulnerability discovery and exploitation in New Exploit Technique In Java Deserialization Attack.
deserializationexploittechnique+2
Black Hat·49 min
Engineers explore architecture and security mechanisms for Pwning Your Java Messaging With Deserialization Vulnerabilities.
vulnerabilitiesdeserializationmessaging
Hexacon·50 min
Analysts investigate attack surfaces and defenses concerning 2023 - Exploiting Hardened .NET Deserialization by Piotr Bazydło.
deserializationexploitinghardened+2
IEEE Symposium on Security and Privacy·14 min
Engineers explore architecture and security mechanisms for Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing.
fuzzingvulnerabilitiesdeserialization
Main Stage·19 min
C Parzian
C Parzian analyzes weaponized machine learning file formats, demonstrating arbitrary code execution vectors in widely deployed AI frameworks.
machine-learningai-securitycode-execution+2
Microsoft Security Response Center (MSRC)·28 min
Industry experts analyze emerging threats surrounding BlueHat 2026: Deserialization gone wrong: Lessons from pentests and variant hunts.
deserializationwronglesson
Microsoft Security Response Center (MSRC)·23 min
Securing .Net Deserialization
Security researchers examine technical aspects of BlueHat v17 || Dangerous Contents - Securing .Net Deserialization.
deserializationdangeroucontent+1
NorthSec·32 min
Philippe Arteau
Analysts investigate attack surfaces and defenses concerning Philippe Arteau - The New Wave of Deserialization Bugs.
deserializationphilippearteau+3
OWASP Foundation·40 min
Alexei Kojenov
Alexei Kojenov analyzes [In]secure Deserialization, And How [Not] To Do It.
deserializationvulnerability-researchsecure
OWASP Foundation·35 min
Arshan Dabirsiaghi
AppSecUSA 2016 investigates Arshan Dabirsiaghi - How To Find The Next Great Deserialization CVE.
cvedeserializationarshan+1
OWASP Foundation·32 min
Ian Haken
Ian Haken details Deserialization Vulnerability Remediation with Automated Gadget Chain Discovery.
deserializationvulnerabilityremediation+3
OWASP Foundation·34 min
AppSecUSA 2018 investigates Deserialization: what, how and why [not] - Alexei Kojenov.
deserializationalexeikojenov
ROOTCON Hacking Conference·31 min
Engineers explore architecture and security mechanisms for ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm.
remote-code-executiondeserializationrootcon+3
ROOTCON Hacking Conference·31 min
Engineers explore architecture and security mechanisms for ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm.
remote-code-executiondeserializationrootcon+3
Videos·39 min
Alvaro Muñoz
Alvaro Muñoz analyzes Attacking .NET deserialization.
deserializationattackingvulnerability-research
Wild West Hackin' Fest·16 min
Jonathan Peterson
Analysts investigate attack surfaces and defenses concerning Deserialization payloads for exploits w/ GO-based .NET & Java gadget generation | Jonathan Peterson.
payloadsdeserializationpayload+3
SEC-T·42 min
Attacking PowerShell CLIXML Deserialization
Presents 0x10: Alexander - Attacking PowerShell CLIXML Deserialization and evaluates key implications for security practitioners.
powershelldeserializationalexander+1
x33fcon·36 min
Engineers explore architecture and security mechanisms for 6. Kévin Tellier & Hugo Vincent: DDD: DCOM, DotNet, Deserialization Kevin&Hugo.
deserializationdotnettellier+3
Black Hat USA·34 min
Biao He · Haowen Mu · Yu Ouyang
Industry experts analyze emerging threats surrounding ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing.
fuzzingdeserializationoddfuzz+3
Main Stage·35 min
Jonathan Birch
Jonathan Birch demonstrates novel .NET deserialization RCE attacks that bypass standard assumptions, exploiting database drivers and immutable data streams.
dotnetdeserializationrce+2