Main Stage·40 min
Hao Xing · Zekai Wu
Hao Xing and Zekai Wu disclose a universal zero-day deserialization bypass in Fastjson, exploiting Java web services to execute RCE and drain crypto nodes.
fastjsondeserializationzero-day+2
1 talk tagged with this topic.
Loading filters…
1–1 of 1 talk · loading…
Main Stage·40 min
Hao Xing · Zekai Wu
Hao Xing and Zekai Wu disclose a universal zero-day deserialization bypass in Fastjson, exploiting Java web services to execute RCE and drain crypto nodes.