Specialized Testing: Deserialization

Insecure deserialization vulnerabilities are frequently
encountered in web applications. This course will teach
you how to test for and exploit these vulnerabilities in web
applications.

Most web application programmers can tell you that the deserialization process can be exploited, but how? In this course, Specialized Testing: Deserialization, you’ll learn to find and exploit insecure deserialization vulnerabilities. First, you’ll explore the intricacies of the deserialization process. Next, you’ll discover how to find locations where insecure deserialization takes place, and how to test those. Finally, you’ll learn how to perform advanced insecure deserialization exploitation. When you’re finished with this course, you’ll have the skills and knowledge of insecure deserialization needed to perform specialized security testing for it.

• Course Overview 1min
• Understanding Insecure Deserialization 23mins
• How to Find and Test for Insecure Deserialization Vulnerabilities 19mins
• Advanced Insecure Deserialization Exploits 17mins