HackTheBox - Ophiuchi

Deserialization attack on YAML and reversing web assembly

HackTheBox - Cereal (User)

Chaining XSS, SSRF, and deserialization vulnerabilities to get RCE