Java exploiting with ysoserial and how gadget chains work

Exploits like #log4j #log4shell uses Java deserialization with gadget chains. Learn how that works here. https://www.synacktiv.com/en/publications/finding-gadgets-like-its-2015-part-1.html http://gursevkalra.blogspot.com/2016/01/ysoserial-commonscollections1-exploit.html https://github.com/frohoff/ysoserial/blob/master/src/main/java/ysoserial/payloads/CommonsCollections1.java