SkillsAdd

trilwu/secskills

exploiting-deserialization

Identify and exploit insecure deserialization across Java, .NET, PHP, Python, and Ruby — recognizing serialized formats by magic bytes, finding gadget chains…

First seen Jul 27, 2026

Installation

$ npx skills add https://github.com/trilwu/secskills
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

deserialization-insecure Similar name
yaklang/hack-skills

>- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize un…

2.9K installs
exploiting-insecure-deserialization Similar name
mukul975/anthropic-cybersecurity-skills

Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .…

215 installs
hunt-deserialization Similar name
elementalsouls/claude-bughunter

Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), …

136 installs

Also in this package

Other skills from trilwu/secskills · top by installs.

npx skills add https://github.com/trilwu/secskills
cracking-passwords 98 exploiting-web3-smart-contracts 96 attacking-wireless-networks 96 testing-web-applications 91 performing-reconnaissance 91 transferring-files 80 testing-apis 79 testing-mobile-applications 77 escalating-linux-privileges 72 exploiting-cloud-platforms 71

Browse all from trilwu/secskills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 136
License LICENSE
Default branch main
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 23 installs