Collected research
Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET
A serializer can be made to emit data that deserializes into a different type than was serialized: a dictionary key named like its type specifier, such as __type or $type, is written verbatim and read back as a type instruction. Untrusted key-value data that is only stored and later reloaded yields remote code execution, even when the attacker never touches the serialized stream.
Record
- Researcher
- Jonathan Birch
- Published by
- DEF CON
- Format
- Whitepaper
- Topic
- Other
In the archive
Related sources
- Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET - Slides Whitepaper
- DEF CON 31 - Second Breakfast Implicit & Mutation Based Serialization Vulns in NET - Jonathan Birch Recording
- Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET - Jonathan Birch
- Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Tags
This page is the archive's own catalogue record. The research is the work of Jonathan Birch, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .