RedTeam Pentesting - Blog - Insecure Deserialization - How to Trace Down a Gadget Chain
May 5, 2023 at 9:53:24 AM UTC - permalink -

- https://blog.redteam-pentesting.de/2021/deserialization-gadget-chain/

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability.
September 10, 2021 at 9:19:13 PM UTC - permalink -

- https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) | PortSwigger Research
June 29, 2021 at 1:03:41 PM UTC - permalink -

- https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464

Analysis of vulnerability caused by Jackson databind | Develop Paper
May 6, 2021 at 8:51:55 AM UTC - permalink -

- https://developpaper.com/analysis-of-vulnerability-caused-by-jackson-databind/

PowerPoint Presentation - us-18-Thomas-It's-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-Know-It.pdf
November 10, 2020 at 12:07:26 PM UTC - permalink -

- https://raw.githubusercontent.com/s-n-t/presentations/master/us-18-Thomas-It%27s-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-Know-It.pdf

Exploiting ViewState Deserialization using Blacklist3r and YSoSerial.Net - NotSoSecure
June 26, 2020 at 9:26:55 AM UTC - permalink -

- https://www.notsosecure.com/exploiting-viewstate-deserialization-using-blacklist3r-and-ysoserial-net/

Liferay deserialization (JSON Deserialization) [part 4] (CVE-2019-16891) – Trung tâm An toàn thông tin – VNPT IT
June 4, 2020 at 10:30:43 AM UTC - permalink -

- https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/

us-18-Thomas-It's-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-....pdf
November 21, 2019 at 11:23:39 AM UTC * - permalink -

- https://cdn2.hubspot.net/hubfs/3853213/us-18-Thomas-It's-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-....pdf