diff --git a/README.md b/README.md index 9436146..4a99883 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,8 @@ A proof-of-concept tool for generating payloads that exploit unsafe Java object ## Description +Released as part of AppSecCali 2015 Talk ["Marshalling Pickles: how deserializing objects will ruin your day"](http://www.slideshare.net/frohoff1/appseccali-2015-marshalling-pickles) + ysoserial is a collection of utilities and property-oriented programming "gadget chains" discovered in common java libraries. The main driver program takes a user-specified command and wraps it in the user-specified gadget chain, then serializes these objects to stdout. When an application with the required gadgets on the classpath unsafely deserializes @@ -63,4 +65,4 @@ $ java -cp ysoserial-0.0.1-all.jar ysoserial.RMIRegistryExploit myhost 1099 Comm 2. Create your feature branch (`git checkout -b my-new-feature`) 3. Commit your changes (`git commit -am 'Add some feature'`) 4. Push to the branch (`git push origin my-new-feature`) -5. Create new Pull Request \ No newline at end of file +5. Create new Pull Request