INDICATOR-SHELLCODE ysoserial Java object deserialization exploit attempt

Stats

First seen

March 2022

Last seen

October 2026

Description

Detects ysoserial deserialization payloads, which exploit unsafe .NET and Java object deserialization to run code. Spotting these indicators early helps contain an intrusion before cyberattackers expand access. The underlying flaw carries the identifier CVE-2017-11284, CVE-2016-1291, CVE-2016-3642, and 23 others.

CVEs

References

• nvd.nist.gov →