Skip To Main Content
Deserialization RCE' on Muck Rack

Deserialization RCE'

As seen in: Packetst Storm
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Deserialization

Contact Deserialization, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Telerik Report Server Authentication Bypass / Remote Code Execution

|
By Soroush Dalili, Spencer McIntyre, Deserialization RCE', original PoC
| Packetst Storm
# This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::Remote::CheckModule include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super( update_info( info, 'Name' => 'Telerik Report Server Auth Bypass and Deserialization RCE', 'Description' => %q{ This...
Open in Who Shared View Duplicates (2) Issue with article?

PyTorch Model Server Registration / Deserialization Remote Code Execution

|
By Spencer McIntyre, Guy Kaplan, Deserialization RCE', Swapneil Kumar Dash
| Packetst Storm
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'rex/zip' class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::Java include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::Java::HTTP::ClassLoader def initialize(_info = {}) super( 'Name' => 'PyTorch Model Server Registration and Deserialization RCE',...
Open in Who Shared Issue with article?
See all 3 articles