LAB 267 – Defending Java Applications Against Deserialization of Untrusted Data

Course Overview

The Deserialization of Untrused Data lab assesses the learner’s ability to fix code in Java applications that allows attackers to execute arbitrary code by deserializing untrusted data using unsafe deserializers.

After completing this lab, the learner will understand how to prevent and mitigate vulnerabilities associated with the use of unsafe deserializers.