writeups.xyz / Attacking PowerShell CLIXML Deserialization

Submitter : c2a

Date: 13 September 2024

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• Microsoft

Authors :

• Alexander Andersson

Link :
https://www.truesec.com/hub/blog/attacking-powershell-clixml-deserialization