Deserialization Java https://www.slideshare.net/codewhitesec/java-deserialization-vulnerabilities-the-forgotten-bug-class ASP https://notsosecure.com/exploiting-viewstate-deserialization-using-blacklist3r-and-ysoserial-net