Last week, HITB A&D CTF was held both online & onside. I didn’t participate in, but from my colleague, i knew that there was at least a challenge with deserialization bug. The challenge i focused on is “linkextractor”, a challenge with the java deserialization bug! While most solutions for this…