insecure-deserialization

Interceptors for PHP's native phar:// stream handling in order to enhance security.

PoC for CVE-2022-23940

CVE-2025-31324 & CVE-2025-42999 vulnerability and compromise assessment tool

Secure coding and application security case studies covering buffer overflow, SQL injection, XSS, hardcoded credentials, insecure deserialization, remediation, and validation.

A tiny Flask app vulnerable to Insecure Deserialization

This write-up is based on Portswigger's Exploiting PHP deserialization with a pre-built gadget chain lab.

Insecure Deserialization Insecure deserialization is a security vulnerability that occurs when an application deserializes untrusted data from an external source without properly validating it. This can allow an attacker to inject malicious code into the application, which can then be executed with the privileges of the application itself.

Curso de OWASP Top 10: de Injections a monitoramento.

Security assessment of OWASP WebGoat using GitHub CodeQL static analysis - findings on XXE, SSRF, insecure deserialization, and SQL injection with remediation.