Update Deserialization_Cheat_Sheet.md (#1380)

* Update Deserialization_Cheat_Sheet.md * Update Deserialization_Cheat_Sheet.md
OWASP · Apr 15, 2024 · 900f82b · 900f82b
1 parent 5391fd0
commit 900f82b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cheatsheets/Deserialization_Cheat_Sheet.md b/cheatsheets/Deserialization_Cheat_Sheet.md
@@ -382,3 +382,5 @@ If the application knows before deserialization which messages will need to be p
     - [James Forshaw - Black Hat USA 2012 - Are You My Type? Breaking .net Sandboxes Through Serialization](https://www.youtube.com/watch?v=Xfbu-pQ1tIc)
     - [Jonathan Birch BlueHat v17 - Dangerous Contents - Securing .Net Deserialization](https://www.youtube.com/watch?v=oxlD8VWWHE8)
     - [Alvaro Muñoz & Oleksandr Mirosh - Friday the 13th: Attacking JSON - AppSecUSA 2017](https://www.youtube.com/watch?v=NqHsaVhlxAQ)
+- Python
+    - [Exploiting Insecure Deserialization bugs found in the Wild (Python Pickles)](https://macrosec.tech/index.php/2021/06/29/exploiting-insecuredeserialization-bugs-found-in-the-wild-python-pickles.)