Serialization and deserialization let programming languages store entire objects, then read them back in later. They can lead to some exciting security problems, including weird Java gadget chains and straight-up code execution in Python.
Join us on Slack!
rpisec.slack.com