0x5t4l1n/hunting
1
0
Fork 0
mirror of https://github.com/0x5t4l1n/hunting.git synced 2026-05-26 11:35:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Restructure repository: Remove OWASP categorization, organize by vulnerability type

Browse Source 
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-01-04 19:01:04 +00:00
parent 274734e91a
commit ba72efbc5e
46 changed files with 341 additions and 323 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Deserialization/README.md
+18
View File
@@ -0,0 +1,18 @@
# Deserialization
## Description
Insecure deserialization vulnerabilities occur when untrusted data is used to abuse the logic of an application, inflict a denial of service attack, or execute arbitrary code upon deserialization. This is particularly dangerous in applications that serialize and deserialize objects.
## Common Attack Vectors
- Cookie values
- API requests (JSON, XML, YAML)
- Session data
- Cached data
- Message queues
- File uploads
## Testing Approach
Submit serialized objects with malicious payloads to test if the application deserializes untrusted data without proper validation.
## Payloads
See `deserialization-payloads.txt` for a comprehensive list of deserialization attack payloads.