Insecure Deserialization using BinaryFormatter; resulting in RCE
Understanding Serialization & Deserialization Simply put, Serialization is a process of converting a complex object into a much flatter format (ex: JSON or XML) with which the data can be stored or transmitted as a sequential stream of bytes and Deserialization is the reverse process of reading the sequential stream of bytes and forming the […]