ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing
Industry experts analyze emerging threats surrounding ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing.
Summary
Black Hat session on ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing.
Related talks
Black Hat·37 min
Bofei Chen · Yinzhi Cao · Lei Zhang · Xinyou Huang · Yuan Zhang · Min Yang
Engineers explore architecture and security mechanisms for JDD: In-depth Mining of Java Deserialization Gadget Chains.
deserializationminingin-depth+3
Black Hat·51 min
Presenters detail vulnerability discovery and exploitation in New Exploit Technique In Java Deserialization Attack.
deserializationexploittechnique+2
Black Hat·39 min
Presenters detail vulnerability discovery and exploitation in Automated Discovery of Deserialization Gadget Chains.
deserializationautomateddiscovery+3