Difficulty: Advanced
What is insecure deserialization?
When an application takes untrusted data and uses it to recreate an object. Attackers can manipulate the data to execute arbitrary code (RCE) during the object creation process.
OWASP, RCE
JavaScript is required for the interactive version of this page, including the code playground and progress tracking. Browse all InternHack tutorials.