Insecure deserialization | Web Security Academy

https://portswigger.net/web-security/deserialization