🛡️ Security

Gadget Chain

A sequence of objects assembled from classes already present in an application and its libraries, arranged so that reconstructing them during deserialization performs an unintended action such as running a command or loading code. Finding one is the core of deserialization exploitation.

📚 Deep Dive

Learn Article

How .NET Deserialization Turns Attacker Data Into Code Execution

Deserialization is safe until the format can name types and call methods. A walk through how attacker-controlled bytes become a gadget chain and then running code, and how to design so they cannot.

intermediate 5 min read

Back to Glossary