Curriculum
Course Content
4 items · 1 sections
- 01 Serialization, deserialization and object graphs
- 02 .NET serialization specifics
- 03 Gadget chains
- 04 Lab: deserialization to RCE
OSWE
Advanced
Certificate
.NET Deserialization
One of the highest-impact web vulnerability classes and a core WEB-300 topic. Serialization and object graphs, .NET serialization specifically, the gadget chains that make dangerous deserialization exploitable, and developing the exploit that reaches remote code execution.
Skills
What You Will Learn in This Course
Explain serialization, deserialization and object graphs.
Identify dangerous .NET deserialization.
Understand and follow gadget chains.
Develop a deserialization-to-RCE exploit in a lab.
About This Course
One of the highest-impact web vulnerability classes and a core WEB-300 topic. Serialization and object graphs, .NET serialization specifically, the gadget chains that make dangerous deserialization exploitable, and developing the exploit that reaches remote code execution.
Requirements
- White-box code analysis.
Who It Is For
- OSWE-track researchers.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
