BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.pass-the-salt.org//pts2022//speaker//TWQU7E
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-pts2022-CQ98BD@cfp.pass-the-salt.org
DTSTART;TZID=CET:20220706T142000
DTEND;TZID=CET:20220706T145500
DESCRIPTION:Arbitrary object deserialisation vulnerability in Java applicat
 ions can be really dangerous\, but also worthless if you are not able to f
 ind a gadget chain.\n\nSome gadgets chains are known and can be used witho
 ut much consideration\, but most of them don't work anymore.\n\nIndeed\, m
 ost known gadgets are 3 or 5 year olds. This can be explained by the fact 
 that finding such chains is hard and few tools exist to automate this proc
 ess. In this talk I want to present a new technique to easily find new gad
 gets by leveraging the power of CodeQL. CodeQL is a very powerful static c
 ode analyzer that provides a way to analyze code by querying it like a dat
 a store. It's open source and can work on open source projects as it requi
 res the source code of the analysed application. CodeQL can find paths bet
 ween different methods and calls inside an application. This is really use
 ful for gadget chain as we need to look for code paths from a deserializat
 ion method to a dangerous one which can lead to arbitrary code execution.
DTSTAMP:20260811T232437Z
LOCATION:Amphitheater
SUMMARY:Finding Java deserialization gadgets with CodeQL - Hugo Vincent
URL:https://cfp.pass-the-salt.org/pts2022/talk/CQ98BD/
END:VEVENT
END:VCALENDAR