$ grep category=Insecure Deserialization

2 articles in this category.

Insecure Deserialization advanced

CVE-2025-53770: SharePoint ToolShell RCE Analysis

A defensive analysis of ToolShell, the SharePoint Server on-premises RCE chain tracked as CVE-2025-53770: root cause, execution flow, attacker artifacts, indicators of compromise, hunting ideas, and remediation guidance.

2025-07-29

Insecure Deserialization advanced

Insecure Deserialization Deep Dive: ASP.NET ViewState & CVE-2020-0688

A researcher-style deep dive into insecure deserialization through ASP.NET ViewState and CVE-2020-0688: serialization concepts, ViewState integrity, Exchange static validation keys, exploit prerequisites, ysoserial.net payload construction, forensic artifacts, detection logic, and remediation.

2022-09-24