I'll start with a working deserialization payload for the Node blog application on NodeBlog, and figure out what characters are breaking the payload when not encoded, and come to an unexpected conclusion.
Blog post for the box: https://0xdf.gitlab.io/2022/01/10/htb...
On this page of the site you can watch the video online Deserialization Encoding on NodeBlog [HackTheBox] with a duration of hours minute second in good quality, which was uploaded by the user 0xdf 10 January 2022, share the link with friends and acquaintances, this video has already been watched 1,272 times on youtube and it was liked by 66 viewers. Enjoy your viewing!