February 1, 2026 Hunting for Deserialization Gadgets in the Rails Ecosystem Walking through the process of finding a new deserialization gadget chain in the Ruby on Rails ecosystem, from trigger to sink.

February 18, 2022 Java Deserialization Vulnerabilities Understanding Java deserialization from serialization internals to exploitation, with a walkthrough of using ysoserial gadget chains to achieve RCE on Apache OpenMeetings.