Java安全之Mojarra JSF反序列化( 三 )

Referencehttps://www.cnblogs.com/nice0e3/p/16205220.html
https://book.hacktricks.xyz/pentesting-web/deserialization/java-jsf-viewstate-.faces-deserialization

推荐阅读