# Deserialization Attacks
**Blogs / Writeups / Presentations:**
* [Java Deserialization in manager.paypal.com](http://artsploit.blogspot.hk/2016/01/paypal-rce.html) by Michael Stepankin
* [Instagram's Million Dollar Bug](http://www.exfiltrated.com/research-Instagram-RCE.php) by Wesley Wineberg
* [(Ruby Cookie Deserialization RCE on facebooksearch.algolia.com](https://hackerone.com/reports/134321) by Michiel Prins (michiel)
* [Java deserialization](https://seanmelia.wordpress.com/2016/07/22/exploiting-java-deserialization-via-jboss/) by meals
*
*
*
*
*
*
*
*
*
*
*
**Tools:**
*
*
*
**Cheat sheets:**
*
**Twitter Threads:**
* \[Deserialization Attack Resources] -
*
*
*
*
*
*
*
*
*
{% embed url="" %}