Back to Playbooks
CTF
ctf-web-server-deser
CTF web server-side deserialization and execution attacks. Java deserialization with ysoserial gadget chains (CommonsCollections, Spring, URLDNS), Python pickle deserialization RCE via __reduce__, race condition TOCTOU balance bypass, VolgaCTF pickle chaining via STOP opcode stripping with os.dup2 s
Slug
ctf-web-server-deser
Category
CTF
Run Playbook
/gitest ctf-web-server-deser