SkillsAdd

wgpsec/aboutsecurity

java-deserialization-methodology

Java 反序列化漏洞检测与利用。当目标是 Java 应用（Tomcat/Spring/WebLogic/JBoss/Jenkins）、发现 rO0AB/aced0005 开头的 Base64 数据、HTTP 请求中有 application/x-java-serialized-object…

First seen Mar 25, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

deserialization-insecure Similar name
yaklang/hack-skills

>- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize un…

2.9K installs
exploiting-insecure-deserialization Similar name
mukul975/anthropic-cybersecurity-skills

Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .…

215 installs
hunt-deserialization Similar name
elementalsouls/claude-bughunter

Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), …

136 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 25 installs