Hello,
Welcome to the Git corresponding to the hands on challenge corresponding to the blog post "Deserialization vulnerabilities: root cause and importance".
The contents of this repository is focuesd on introducing you to how Java Deserialization exploits work by helping you setup a vulnerable Java Web Application in an isolated local docker environment. The challenge consists of identifying and successfully exploiting the Java Deserialization vulnerability in order to obtain Remote Code Execution on the target, and, if you like CTFs, getting the flag.
Although no file of this challenge is considered malware, it is unadvised to run/install them on "Production" systems.
The solution/writeup for this challenge can be found in the PDF hosted on our blog page.