Serialization and Deserialization

Insecure Deserialization

Created: 2022-07-12
Tags: #fleeting


Serialization
Converts objects used in prog languange into compatible formatting for transmitting data between systems or networks.

Deserializaztion
Converts serialised info to their complex form -- an object that application will understand.

Example of Serialization and Deserialization
"password123" needs to be sent to server
-> "password123" will be serialized to binary
-> Once binary format reaches the server, it will be deserialized.
Pasted image 20220712174912.png

References