# A06 Vulnerable Components

> Skills for exploiting vulnerable and outdated components including insecure deserialization per OWASP A06:2021. Use when this capability is needed.

- Skill: `tomevault-io/a06-vulnerable-components` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/a06-vulnerable-components`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/a06-vulnerable-components/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/a06-vulnerable-components

---


# Vulnerable and Outdated Components (OWASP A06)

Using components with known vulnerabilities or outdated software.

## Skills

- [Deserialization](references/deserialization.md) - Insecure deserialization exploitation

## Quick Reference

| Language | Tool | Signature |
|----------|------|-----------|
| Java | ysoserial | `rO0AB...` (Base64) |
| PHP | phpggc | `O:4:"...` |
| Python | pickle | `gASV...` (Base64) |
| .NET | ysoserial.net | ViewState |

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/omkar-ukirde) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-13 -->