In this solution you will find two different project :
##Serialization Exploit Based on this paper : https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-JSON-Attacks-wp.pdf
Exploit of JSon .Net
##XXE Exploit Test XmlReader, XmlTextReader and XmlDocument default vulnerability to XXE