New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Many languages use object serialization for communication as it can greatly ease development.
However, in some cases, actions can be taken automatically when objects are deserialized, if certain conditions are present.
If the serialized object is ever exposed to and end user, that user can tamper with and modify the object, either causing unauthorized changes in variables, or, if those conditions are present, execution of…
This issue has been the source of several major security breaches.
In this lab, we will examine this problem, see how it can be exploited, and demonstrate best practices for securing your code against these types of attacks.
