Serialize Badge

2940 Completed
11 Videos
5 Exercises
Easy image for XMLDecoder

XMLDecoder

  • This exercise covers the exploitation of an application using XMLDecoder
  • 1 video
  • Completed by 4775 students
  • Takes Less than an hour on average
  • Java

 

Easy image for CVE-2016-0792

CVE-2016-0792

  • This exercise covers the exploitation of an Xstream vulnerability in Jenkins
  • 1 video
  • Completed by 4274 students
  • Takes Less than an hour on average
  • Java/Tomcat
  • CWE-20

 

Medium image for ObjectInputStream

ObjectInputStream

  • This exercise covers the exploitation of a call to readObject in a Spring application
  • 1 video
  • Completed by 3890 students
  • Takes Less than an hour on average
  • Java

 

Medium image for CVE-2013-0156: Rails Object Injection

CVE-2013-0156: Rails Object Injection

  • This exercise covers the exploitation of a code execution in Ruby-on-Rails using XML and YAML.
  • 2 videos
  • Completed by 3621 students
  • Takes Less than an hour on average
  • Rails
  • CWE-20

 

Hard image for API to Shell

API to Shell

  • This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.
  • 6 videos
  • Completed by 3105 students
  • Takes Between 2 and 4 hours on average
  • PHP/Apache/Mysql
  • API
  • CWE-502,CWE-310