Portable Deserialization Payloads Using Go

No ratings

Presented at Wild West Hackin' Fest 2026 by

To watch this talk virtually, go to Track 1 Thursday AM Livestream.If you are tired of having to pull up a VM, install java, or paste ugly gadget blobs into your serialization exploits then come to this talk.This presentation is a demonstration and guide on the use of a new open-sourced GO-based deserialization gadget generation library by VulnCheck that takes advantage of the great cross-platform capabilities of go to generate Java or .NET gadgets for your exploits from any platform, all without requiring Windows or Java.In addition to the package's use as a library, an accompanying tool will also be released during the talk that makes uses this library to generate payloads right from the terminal.