Exploiting Deserialisation in ASP.NET via ViewState

Yet Other Examples of Abusing CSRF in Logout

How to win BIG and even more!

Finding and Exploiting .NET Remoting over HTTP using Deserialisation

More research on .NET deserialization

Feel honoured to be there again after 8 years: Top 10 Web Hacking Techniques of 2017

Story of my two (but actually three) RCEs in SharePoint in 2018

ASP.NET resource files (.RESX) and deserialization issues

MS 2018 Q4 – Top 5 Bounty Hunter for 2 RCEs in SharePoint Online

WAF Bypass Techniques – Using HTTP Standard and Web Servers’ Behaviour