Verified record · from the answer index
deserialization-insecure
skilltested · static-verifiedscore 49/100signed passport ✓3,501 uses
Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via ObjectInputStream, unserialize, pickle, or similar mechanisms that may lead to RCE, file access, or privilege escalation.
Declared tools (1)
deserialization-insecure
skill:yaklang/hack-skills/deserialization-insecure · published by yaklang · source repository