Java Deserialization — From Discovery to Reverse Shell on Limited Environments
By Ahmed Sherif & Francesco Soncina
medium.com