hunt-deserialization

Insecure deserialization exploitation targets flaws where applications untrusted user input, allowing attackers to inject malicious gadget chains for remote code execution. This Skill identifies and provides exploit methods for these flaws across multiple languages and frameworks.

Yes, ysoserial generates Java gadget chains to exploit object injection vulnerabilities. This Skill supports using ysoserial gadgets to scan and exploit Java applications, potentially leading to remote command execution.

Yes, it detects and exploits JNDI injection and Log4Shell vulnerabilities. The Skill identifies these specific attack vectors alongside standard insecure deserialization flaws to provide comprehensive remote code execution methods.

The best way to exploit PHP object injection and Python pickle RCE is by using targeted payload generators like phpggc. This Skill provides exploit methods for both PHP object injection and Python pickle vulnerabilities to achieve remote code execution.

Targeting .NET BinaryFormatter and Ruby Marshal.load vulnerabilities involves injecting crafted serialized payloads. This Skill identifies and provides exploit methods to execute arbitrary code through these specific deserialization mechanisms.