Using SerializationDumper for Java Deserialization and CTFs | doyler.net

https://www.doyler.net/security-not-included/serializationdumper