TokenToSeaSkill 广场
English 控制台

Deserialization Insecure

yaklang

Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via ObjectInputStream, unserialize, pickle, or similar mechanisms that may lead to RCE, file access, or privilege escalation.

安装

尚未确认此技能的独立目录。下面命令会打开仓库技能选择器,请按上游说明选择技能。

skills CLI
npx skills add yaklang/hack-skills