From 4f00182efc02f2776fe0286184ba144c297cd63f Mon Sep 17 00:00:00 2001 From: Chris Frohoff Date: Wed, 4 Nov 2015 13:16:02 -0800 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 556a16a..82faeb7 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ A proof-of-concept tool for generating payloads that exploit unsafe Java object ## Description -Released as part of AppSecCali 2015 Talk ["Marshalling Pickles: how deserializing objects will ruin your day"](http://www.slideshare.net/frohoff1/appseccali-2015-marshalling-pickles) +Released as part of AppSecCali 2015 Talk ["Marshalling Pickles: how deserializing objects will ruin your day"](http://frohoff.github.io/appseccali-marshalling-pickles/) __ysoserial__ is a collection of utilities and property-oriented programming "gadget chains" discovered in common java libraries that can, under the right conditions, exploit Java applications performing __unsafe deserialization__ of objects.