What is Kubernetes? (As per kubernetes website) Kubernetes is an open-source container-orchestration system for automating computer application deployment, scaling, and management. It was originally designed by Google and is now maintained by the Cloud Native Computing Foundation The container could be anything and does not matter what platform it is…

Hi All, Welcome to the new blog post on .NET ViewState deserialization. I would like to thank Subodh Pandey for contributing to this blog post and the study without which I could not have had an in-depth insight on this topic. Before getting started with ViewState deserialization, let’s go through…

Hi Everyone, Welcome to my new blog on Java Deserialization series. Below are the links of my previous blogs on java deserialization: Understanding Java De-serialization Hi All,medium.com SnakeYaml Deserilization exploited Hi All,medium.com Okay, so in this blog we will be discussing on Jackson deserialization and vulnerable implementations and exploitation of the same. So, before we begin with our discussion on…

Hi All, Welcome to my new blog on Java De-serialization. In this blog we will understand the basics of Java Deserilization, how is it vulnerable and how can this vulnerability be remediated. …

Hi All, This blog is about a SnakeYaml deserilization vulnerability that was exploited by my friend in one of the recent penetration testing engagements. I have recreated the scenario here to demonstrate the deserilization exploitation. So basically, the vulnerable application had a functionality where we can upload a Yaml file…