Java Deserialization on WE ARE THE BUGhttps://wearethebug.dev/tags/java-deserialization/Recent content on WE ARE THE BUGTradecraften-usSun, 19 Jan 2025 00:00:00 +0000VULNLAB: Atlashttps://wearethebug.dev/posts/vl-atlas/Sun, 19 Jan 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-atlas/Atlas is a Hard-difficulty machine focusing on Java deserialization and .NET cryptographic analysis. The foothold involves exploiting a vulnerable Castor XML library in a Spring Boot app and reverse-engineering a .NET application to recover credentials.