Skip to content

In progress WIP Web Code Snippets

CTRL K

CTRL K

Scaffolding
HTTP
Output Parsing
Regex
Encodings
Utils
Subprocess
WebSockets
Concurrency
Infra
Frameworks
Debugging
- VS Code
- Command line
OOB Exfil
- webhook.site
pwntools
Archives
Chains
SQL Injection
- H2
- MSSQL
- MySQL
- PostgreSQL
- SQLite
NoSQL Injection
XPath Injection
LDAP Injection
- Boolean Blind
Regex Bypass
- Ruby
Code Injection
Parameter Pollution
- Flask frontend / PHP backend
Command Injection
- Blind OOB
Prototype Pollution
- Pug
SSTI
Deserialization
XSS
- OOB Exfiltration

Scaffolding
HTTP
Output Parsing
Regex
Encodings
Utils
Subprocess
WebSockets
Concurrency
Infra
Frameworks
Debugging
- VS Code
- Command line
OOB Exfil
- webhook.site
pwntools
Archives
Chains
SQL Injection
- H2
- MSSQL
- MySQL
- PostgreSQL
- SQLite
NoSQL Injection
XPath Injection
LDAP Injection
- Boolean Blind
Regex Bypass
- Ruby
Code Injection
Parameter Pollution
- Flask frontend / PHP backend
Command Injection
- Blind OOB
Prototype Pollution
- Pug
SSTI
Deserialization
XSS
- OOB Exfiltration

Deserialization

Java

Java

Java deserialization sinks, object-construction behavior, gadget discovery, and exploitation constraints.

Notable CVEs (1)

Powered by Hextra

© 2026 Hextra Project.