Alvaro Muñoz: .NET Serialization: Detecting and defending vulnerable endpoints

2016 was the year of Java deserialization apocalypse. Although Java Deserialization attacks were known for years, the publication of the Apache Commons Colle...