Topic · 2 articles
deserialization
Advanced level
2Premium
ASP.NET — ViewState deserialization, machineKey leak, padding oracle
Classic and modern vulnerabilities in the ASP.NET stack: ViewState deserialization without signature validation, machineKey leak via web.config disclosure, padding oracle attacks against encrypted ViewState.
17 minasp-netviewstatedeserialization
Read article
Premium
PHP class pollution — the PHP equivalent of Prototype Pollution
How PHP class pollution (via recursive merge / object instantiation with user input) produces deserialization-like RCE in Laravel, Symfony, WordPress apps without needing gadget chains.
14 minphpclass-pollutiondeserialization
Read article
Practice deserialization with real labs
Apply the techniques in safe environments based on real bug bounty reports.
- hunters training
- 712
- labs from real reports
- 55
- completions
- 1,206
- in bounties practiced
- $213,970
hunters training
labs from real reports
completions
in bounties practiced
46 flags captured this week·Real reports from HackerOne · Bugcrowd · Intigriti·No commitment·Free Academy
BBLabs · bug bounty training
Stop reading about bugs and start hunting them
Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.
No card · free Academy · cancel anytime