Niklas Heringer
Niklas Heringer
Cybersecurity & Math.
⌘K
Subscribe Sign in
Niklas Heringer
members-only post insecure-deserialization

Python Deserialization Attacks Explained: How Hackers Exploit Pickle (and How to Defend)

Learn how Python deserialization attacks work, see a real Pickle exploit in action, and discover best practices to secure your code against remote code execution vulnerabilities.
Python Deserialization Attacks Explained: How Hackers Exploit Pickle (and How to Defend)
$ stat python-deserialization-attacks-explained-how-hackers-exploit-pickle-and-how-to-defend.md
File:
python-deserialization-attacks-explained-how-hackers-exploit-pickle-and-how-to-defend.md
Modified:
2025-11-16 18:36
Read:
5 min read
Tags:
insecure-deserialization
This post is for subscribers only

Subscribe to continue reading


More like this

Pentesting Passkeys: A Practical Methodology for WebAuthn Deployments

Pentesting Passkeys: A Practical Methodology for WebAuthn Deployments

Recon, server-side Relying Party tests, and the Windows-focused OS and authenticator attacks: end-to-end, tool by tool.
Field Notes from Black Hat US 2026 and DEF CON 34

Field Notes from Black Hat US 2026 and DEF CON 34

Field notes from Black Hat USA 2026 and DEF CON 34: the talks that mattered to me most, honest questions about where AI-accelerated research is heading, and the deep dives I'm committing to next.
A Hacker's Guide to Post-Quantum Cryptography: ML-KEM & FIPS 203

A Hacker's Guide to Post-Quantum Cryptography: ML-KEM & FIPS 203

Everything you need to understand the algorithm that's replacing RSA (in terms of Key Exchange), from polynomial rings to key encapsulation, with zero hand-waving.
Linux Lab Pitfalls That Will Cost You Hours

Linux Lab Pitfalls That Will Cost You Hours

Netcat, MTU, SUID, shell stabilisation; Linux lab concepts most resources skip. Explanations, fixes, quizzes to test your depth.
Windows Privilege Escalation 02: Running through PrivEsc Paths from Zero

Windows Privilege Escalation 02: Running through PrivEsc Paths from Zero

Working through HackTheBox's Windows Privilege Escalation module as a beginner. Every token abuse, group membership exploit, and real mistake documented. SeImpersonate, DnsAdmins, Server Operators, SeBackupPrivilege and more. No filler, just what got me SYSTEM.
Windows Privilege Escalation 01: Initial Enumeration

Windows Privilege Escalation 01: Initial Enumeration

Hands-on walkthrough of Windows PrivEsc fundamentals, with network recon, Defender analysis, AppLocker parsing, and process enumeration. Real command output and the reasoning behind every step.