owaspsd-deserialize-my-shorts
by frohoff
Slide deck from OWASP SD Talk "Deserialize My Shorts: Or How I Learned to Start Worrying and Hate Java Object Deserialization"
AI summary
Deserialization discussion
A presentation and discussion on the security risks of deserialization in Java object graphs.
- stars
- 5
- forks
- 2
- watching
- 4
Similar projects
Found by comparing what the projects do, not just their names.
Deserialization Tool
A Burp extension that enables Java Deserialization Attacks using a payload generator tool
JSON deserializer
A Clojure/ClojureScript library for accelerating JSON data deserialization in browser applications.
Class loader and deserialization utility
A tool to deserialize Java objects to XML and load classes/jars dynamically.
Deserialization scanner
Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities
JSON serializer/deserializer
A Java library for serializing and deserializing objects to JSON-LD format using annotations.
Deserialization scanner
A plugin for detecting and exploiting vulnerabilities in Java deserialization
Deserialization vulnerability lab
A lab project providing code samples and tools to understand deserialization vulnerabilities in Java applications.
Vulnerability scanner
A Burp Suite Extender to identify Java Deserialization vulnerabilities in client requests and server responses.
Edge color override library
A library to override custom colors for the edge effect used by common Android UI components
Deserialization payload generator
A utility for generating deserialization payloads in SnakeYAML format to exploit certain security vulnerabilities
Deserialization shield
An agent that prevents deserialization attacks by making certain classes unserializable
Deserialization tester
A tool to detect and exploit deserialization vulnerabilities in Java and .NET applications.
Deserialization Whitelist Agent
An agent-based tool to create and manage a whitelist of whitelisted classes for protection against malicious Java deserialization attacks
RMI vulnerability demo
Demonstrating vulnerabilities in Java RMI services
Layout helper
A syntactic sugar library that simplifies layout constraints in iOS apps
