Recently, I encountered the issue of insecure deserialization in Java, a risk that has been present since the early days of ObjectInputStream. This vulnerability allows an attacker to intercept a serialized object (Serializable), modify it using tools like Burp Suite, decode it from Base64, and reinject it with malicious code using utilities like ysoserial. The…| Aironman techblog
Riesgos de la Deserialización Insegura en Java y Medidas de Mitigación Recientemente, me he encontrado con el problema de la deserialización insegura en Java, un riesgo que ha estado presente desde…| Aironman techblog
JMX stands for Java| Alexey Ragozin