# A06 Vulnerable Components

> Skills for exploiting vulnerable and outdated components including insecure deserialization per OWASP A06:2021.

- Skill: `omkar-ukirde/a06-vulnerable-components` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add omkar-ukirde/a06-vulnerable-components`
- Raw SKILL.md: https://api.skillmd.com/api/skills/omkar-ukirde/a06-vulnerable-components/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: omkar-ukirde (https://skillmd.com/u/omkar-ukirde)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/omkar-ukirde/a06-vulnerable-components

---


# Vulnerable and Outdated Components (OWASP A06)

Using components with known vulnerabilities or outdated software.

## Skills

- [Deserialization](references/deserialization.md) - Insecure deserialization exploitation

## Quick Reference

| Language | Tool | Signature |
|----------|------|-----------|
| Java | ysoserial | `rO0AB...` (Base64) |
| PHP | phpggc | `O:4:"...` |
| Python | pickle | `gASV...` (Base64) |
| .NET | ysoserial.net | ViewState |