Deserialization Courses and Certifications

NahamSec

OSCP, Deserialization Bugs, Shodan Tips, and Becoming an MVH - Interview with SMSecurity

Insightful discussion on OSCP certification, deserialization vulnerabilities, Shodan techniques, and achieving Most Valuable Hacker status, offering valuable insights for aspiring cybersecurity professionals.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Black Hat

How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain

Explore a JSON deserialization vulnerability in Fastjson, its exploitation for remote code execution, and implications for blockchain security.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Black Hat

Automated Discovery of Deserialization Gadget Chains

Explore automated discovery of deserialization gadget chains, understanding vulnerabilities, and learning techniques to find and mitigate exploits in Java libraries and applications.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Pwning Your Java Messaging With Deserialization Vulnerabilities

Explore Java messaging vulnerabilities, focusing on deserialization issues in popular message brokers. Learn to identify and exploit these weaknesses using the Java Messaging Exploitation Tool.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Insecure Deserialization, and How Not to Do It

Explore secure deserialization techniques and common vulnerabilities with practical demos, focusing on session cookies and big vulnerabilities in various platforms.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Deserialization - What, How and Why Not

Explore insecure deserialization risks, vulnerabilities, and prevention techniques through code examples and live demos, focusing on Java but applicable to other languages.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Black Hat

New Exploit Technique in Java Deserialization Attack

Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Automated Gadget Chain Discovery for Deserialization Vulnerability Remediation

Explore automated discovery of Java deserialization gadget chains for vulnerability assessment and prioritized remediation, with insights on a new FOSS toolkit for evaluating security risks.

• YouTube
• 32 minutes
• On-Demand
• Free Video

OWASP Foundation

How to Find the Next Great Deserialization CVE - AppSecUSA 2016

Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.

• YouTube
• 35 minutes
• On-Demand
• Free Video

The Cherno

Serialization - Deserialization

Learn efficient data conversion techniques for storing and transmitting objects, enhancing your programming skills in serialization and deserialization processes.

• YouTube
• 21 minutes
• On-Demand
• Free Video

NorthSec

The New Wave of Deserialization Bugs

Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

SyScan360

Remote Code Execution via Java Native Deserialization

Explore Java deserialization vulnerabilities, focusing on remote code execution through XML and binary deserialization. Learn about CVEs, tools, and future research in this area.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Scalable Parallel Computing Lab, SPCL @ ETH Zurich

Accelerating Data Serialization and Deserialization Protocols with In-Network Compute

Explore in-network compute techniques to accelerate data serialization/deserialization protocols, enhancing efficiency in datacenter and HPC systems. Learn about SmartNIC offloading and its impact on performance.

• YouTube
• 24 minutes
• On-Demand
• Free Video

CryptoCat

403 Bypass and Deserialization Vulnerability Exploitation in BentoML

Dive into web security exploitation through a CTF challenge walkthrough covering 403 bypass techniques, BentoML vulnerability analysis, and pickle deserialization for achieving remote code execution.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Black Hat

ODDFuzz - Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing

Innovative approach to efficiently detect Java deserialization vulnerabilities using structure-aware directed greybox fuzzing, addressing challenges in existing tools and improving precision in gadget chain hunting.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk