文件
websafe-kb/08-threat-intel/repro-profiles/family-generic/deserialization-generic.yaml

31 行
796 B
YAML

profile_id: deserialization-generic
match_rules:
keywords:
- deserialization
- serialization
vuln_family: deserialization
provisioning_mode: synthetic
artifact_source:
strategy: source-or-synthetic
required_services:
- app
seed_actions:
- kind: note
message: Use inert serialized payloads and do not execute gadget chains against non-lab targets.
baseline_actions:
- kind: http-get
path: /
attack_actions:
- kind: note
message: Demonstrate unsafe decode path with inert object graph or marker token.
browser_assertions:
required: false
success_criteria:
- Deserialization path is confirmed without executing destructive gadget chains.
cleanup_policy: destroy
destructive_risk: high
allowed_target_types:
- lab-local
- lab-public
- authorized-third-party