duc193 blog
Security Blog
Writeups, research posts, and technical articles. Full entries open on GitBook.
Or browse posts here ↓Featured / Web Security
- JDBC Attack: H2 RCE, PostgreSQL socketFactory, MySQL Deserialization Driver abuse, deserialization risk, and practical exploitation paths.
- Java Deserialization Notes Serialization internals, gadget chains, and exploitation basics.
- Java Reflection Reflection concepts that matter in Java security work.
- Class Loader Class loading behavior and security-relevant internals.