defensive-deserialization

Community

Detect and block deserialization threats

Authorriparino
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Deserialization attacks exploit insecure object serialization to execute code, access data, or take control of applications; this skill provides detection and triage guidance to identify such patterns and explain remediation.

Core Features & Use Cases

  • Detects Java and .NET deserialization patterns and gadget-chain indicators (e.g., ysoserial, ViewState tampering).
  • Guides incident response and threat-hunting workflows with platform-specific hardening recommendations.
  • Use Case: SOC teams triage alerts for deserialization activity and deploy mitigations across Java and .NET services.

Quick Start

Load the defensive-deserialization skill into Claude and run the detection checks against your application logs to surface deserialization indicators.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: defensive-deserialization
Download link: https://github.com/riparino/Claude-Cyber/archive/main.zip#defensive-deserialization

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.