JDD: In-depth Mining of Java Deserialization Gadget Chains

Bofei ChenYinzhi CaoLei ZhangXinyou HuangYuan ZhangMin Yang

AppSecBlack Hat37 minAdvanced Open on YouTube ↗

Engineers explore architecture and security mechanisms for JDD: In-depth Mining of Java Deserialization Gadget Chains.

Summary

Black Hat session on JDD: In-depth Mining of Java Deserialization Gadget Chains.

Related talks

Black Hat·39 min

Black Hat
AppSec
Date: 2025
Location: Black Hat

Automated Discovery of Deserialization Gadget Chains

Presenters detail vulnerability discovery and exploitation in Automated Discovery of Deserialization Gadget Chains.

deserializationautomateddiscovery+3

OWASP Foundation·32 min

OWASP
AppSec
Date: 2025
Location: Owasp

Deserialization Vulnerability Remediation with Automated Gadget Chain Discovery

Ian Haken

Ian Haken details Deserialization Vulnerability Remediation with Automated Gadget Chain Discovery.

deserializationvulnerabilityremediation+3

Black Hat USA·34 min

Black Hat
AppSec
Date: 2023
Location: Black Hat

ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing

Biao He · Haowen Mu · Yu Ouyang

Industry experts analyze emerging threats surrounding ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing.

fuzzingdeserializationoddfuzz+3