skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

hunt-deserialization

Identify insecure deserialization vulnerabilities and generate exploit payloads for RCE verification.

3|1|Updated Jul 2, 2026
Search Tags:#security#pentest#deserialization#rce#ysoserial#log4shell
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-deserialization-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-deserialization
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-deserialization
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-deserialization-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ysoserial, phpggc, interactsh-client.

What problem does it solve?

This skill addresses the high-risk vulnerability of insecure deserialization, which often leads to full Remote Code Execution (RCE) on application servers.

Core Features & Use Cases

  • Gadget Chain Identification: Detects vulnerable patterns in Java, PHP, Python, .NET, and Ruby environments.
  • Exploit Payload Generation: Provides methodologies for crafting payloads using tools like ysoserial and phpggc.
  • Use Case: When testing a web application that uses Java serialized objects in cookies, use this skill to verify if the application is susceptible to RCE by crafting a CommonsCollections gadget chain and confirming execution via an OOB callback.

Quick Start

Use the hunt-deserialization skill to analyze the target for Java deserialization vulnerabilities and generate a test payload for OOB verification.

Frequently Asked Questions about hunt-deserialization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is insecure deserialization and how does it lead to RCE?▼

Insecure deserialization occurs when an application untrusted serialized data streams without validation, allowing attackers to manipulate gadget chains and execute remote code (RCE) on the server.

How do I generate an exploit payload for Java deserialization vulnerabilities?▼

Generate Java deserialization exploit payloads by analyzing serialized object streams and applying ysoserial gadget chain primitives, crafting payloads like CommonsCollections to test for remote code execution.

Can I use this approach to exploit PHP and Python serialized objects?▼

Yes, this approach identifies and exploits insecure deserialization vulnerabilities across multiple programming languages, including PHP, Python, .NET, and Ruby, by applying known gadget chain primitives.

How do I verify remote code execution from a deserialization exploit?▼

Verify remote code execution impact by integrating with OOB listeners like interactsh-client, generating an exploit payload that triggers a callback to confirm successful server-side command execution.

Do I need ysoserial and phpggc to test for deserialization vulnerabilities?▼

Yes, exploit payload generation relies on integration with exploit frameworks like ysoserial for Java and phpggc for PHP to craft and validate gadget chains targeting server-side RCE vectors.

What is the best way to identify vulnerable gadget chains in web applications?▼

Identify vulnerable gadget chains by analyzing serialized data streams in application components like cookies, detecting vulnerable patterns across different environments, and applying known exploit primitives.

Related Skills

Explore More Software Engineering Skills→
jMertajMerta
130

vps-checkup

Automate a read-only health and security review for an Ubuntu VPS running Docker.

Community
Advanced
SHAdd0WTAkaSHAdd0WTAka
435

poc-validator

Generate and verify exploit PoCs in sandboxed environments with auditable reports.

Community
Advanced
sayseven7sayseven7
11

deserialization-insecure

Identify insecure deserialization sinks and generate exploitation paths.

Community
Advanced
utsavthakurutsavthakur

prototype-pollution-advanced

Guide advanced prototype pollution techniques for server-side RCE and client-side gadget exploitation.

Community
Advanced