![Propagating Client-Side View State - AJAX and JavaServer™ Faces [Book]](https://www.oreilly.com/api/v2/epubs/0136133533/files/graphics/c0021-01.jpg "Propagating Client-Side View State - AJAX and JavaServer™ Faces [Book]")
Propagating Client-Side View State - AJAX and JavaServer™ Faces [Book]
How JSF Works and how to Debug it - is Polyglot an Alternative? - DZone
performance - Handling JSF ViewState errors using JMeter - Software Quality Assurance & Testing Stack Exchange
HP Intelligent Management Center v5.1: Bypassing javax.faces.ViewState CSRF Protection – RCE Security
Statement of work
java - Testing JSF application with JMeter - ViewState issue - Stack Overflow
JSF ViewState upside-down
Java JSF ViewState (.faces) Deserialization - HackTricks
JSF ViewState y sus opciones - Arquitectura Java
OmniFaces & JSF Fans: JSF saving the view state
Demystifying Insecure Deserialisation on JSF Application – Geek Freak
HackTheBox | Arkham
performance - Handling JSF ViewState errors using JMeter - Software Quality Assurance & Testing Stack Exchange
JSF ViewState y sus opciones - Arquitectura Java
Demystifying Insecure Deserialisation on JSF Application – Geek Freak
![PDF] Dissecting Java Server Faces for Penetration Testing | Semantic Scholar](https://d3i71xaburhd42.cloudfront.net/d8c3e8f94bf6440bc329720b38c707e5e3b9f70a/12-Figure5-1.png "PDF] Dissecting Java Server Faces for Penetration Testing | Semantic Scholar")
PDF] Dissecting Java Server Faces for Penetration Testing | Semantic Scholar
JSF ViewState - Java EE: JavaServer Faces JSF Video Tutorial | LinkedIn Learning, formerly Lynda.com
Exploiting Java Deserialization Vulnerabilities (RCE) on JSF/Seam Applications with JexBoss - YouTube
Demystifying Insecure Deserialisation on JSF Application – Geek Freak
java - Testing JSF application with JMeter - ViewState issue - Stack Overflow
Java JSF ViewState (.faces) Deserialization - HackTricks
Statement of work
