https://nickbloor.co.uk/2017/08/13/attacking-java-deserialization https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet