java – Silent Signal Techblog
Extracting data using Insecure Direct Object Reference (IDOR) flaws | Hands-On Application Penetration Testing with Burp Suite
Introduction to Burp, the dedicated tool to web platforms security
Understanding & Identifying Insecure Deserialization Vulnerabilities | by goswamiijaya | InfoSec Write-ups
What is Burp Extension? - Indusface Learning
Insecure Deserialization explained with examples - thehackerish
GitHub - federicodotta/Java-Deserialization-Scanner: All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
Reliable discovery and exploitation of Java deserialization vulnerabilities | @Mediaservice.net Technical Blog
Scanning an enterprise organisation for the critical Java deserialization vulnerability | Weblog | Sijmen Ruwhof
C0:7E:01:8C:93:EB:D0:FD:E3:CD:74:32:9F:AF:FA:6F:40:FD:8E:1C:05:E3:79:41:6C:77:CD:EF:3E:04:11:12: Burp Suite Certified Practitioner Exam Prep Walk thru
Intruder detection
GitHub - PortSwigger/java-deserialization-scanner: All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
Burp Suite Extensions
KSEC ARK - Pentesting and redteam knowledge base | Burp Suite - Top Extensions
Java Deserialization Attacks with Burp
5 Common BurpSuite Extension | Automation for deserialization - Blog | Securium Solutions
Augmenting your manual testing with Burp Scanner | Web Security Academy
Releases · federicodotta/Java-Deserialization-Scanner · GitHub
Useful extensions for burpsuite – All things in moderation
Java DNS Deserialization, GadgetProbe and Java Deserialization Scanner - HackTricks - Boitatech
Java Deserialization — From Discovery to Reverse Shell on Limited Environments | by Francesco Soncina (phra) | ABN AMRO — Red Team | Medium
