JD Tech
Jan 21, 2019 · Information Security
Analysis of a PriorityQueue-Based Java Deserialization Gadget Using ysoserial
This article examines how a specially crafted PriorityQueue object, generated via the ysoserial tool, can be serialized and later trigger malicious code execution during Java deserialization, detailing the construction of the gadget, the transformation chain, and the underlying JVM mechanisms that enable the exploit.
GadgetJavaPriorityQueue
0 likes · 13 min read