Java Native Serialization Stream & RCE Gadget Chains
Comprehensive principal engineering guide to Java native serialization stream wire protocols, deserialization remote code execution (RCE) gadget chains, and JEP 290 / JEP 415 Look-Ahead Deserialization Filters.