De Serialization related

This page has links to articles are tools related to de-serialization vulnerabilities in various languages such as Java, C#, Ruby etc

---

• https://brandur.org/fragments/gadgets-and-chains

• https://deadcode.me/blog/2016/09/02/Blind-Java-Deserialization-Commons-Gadgets.html

• https://deadcode.me/blog/2016/09/18/Blind-Java-Deserialization-Part-II.html

• https://frohoff.github.io/appseccali-marshalling-pickles/

• https://github.com/frohoff/ysoserial

• https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

• https://github.com/foxglovesec/JavaUnserializeExploits

• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet/blob/master/README.md