Second Breakfast - Implicit and Mutation-Based Serialization Vulnerabilities in .NET

This course covers novel attacks against .NET serialization, including serialization exploits of platforms not using well-known .NET serializers, "mutation" attacks exploiting deserialization, and techniques for bypassing serialization binders. The learning outcomes include understanding how to identify and exploit serialization vulnerabilities in .NET applications. The course teaches skills such as identifying vulnerable serialization implementations and exploiting deserialization flaws. The teaching method involves demonstrating remote code execution vulnerabilities in various databases and libraries. The intended audience for this course includes cybersecurity professionals, software developers, and anyone interested in understanding and mitigating serialization vulnerabilities in .NET applications.