diff --git a/Insecure Deserialization/Java.md b/Insecure Deserialization/Java.md
index f3606d1..5915688 100644
--- a/Insecure Deserialization/Java.md	
+++ b/Insecure Deserialization/Java.md	
@@ -63,10 +63,12 @@ JRE8u20_RCE_Gadget
 
 JexBoss - JBoss (and others Java Deserialization Vulnerabilities) verify and EXploitation Tool, [https://github.com/joaomatosf/jexboss](https://github.com/joaomatosf/jexboss)
 
+ysoserial-modified [https://github.com/pimps/ysoserial-modified](https://github.com/pimps/ysoserial-modified)
+
 ## References
 
 - [Github - ysoserial](https://github.com/frohoff/ysoserial)
 - [Java-Deserialization-Cheat-Sheet - GrrrDog](https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet/blob/master/README.md)
 - [Understanding & practicing java deserialization exploits](https://diablohorn.com/2017/09/09/understanding-practicing-java-deserialization-exploits/)
 - [How i found a 1500$ worth Deserialization vulnerability - @D0rkerDevil](https://medium.com/@D0rkerDevil/how-i-found-a-1500-worth-deserialization-vulnerability-9ce753416e0a)
-- [Misconfigured JSF ViewStates can lead to severe RCE vulnerabilities - 14 Aug 2017, Peter Stöckli](https://www.alphabot.com/security/blog/2017/java/Misconfigured-JSF-ViewStates-can-lead-to-severe-RCE-vulnerabilities.html)
\ No newline at end of file
+- [Misconfigured JSF ViewStates can lead to severe RCE vulnerabilities - 14 Aug 2017, Peter Stöckli](https://www.alphabot.com/security/blog/2017/java/Misconfigured-JSF-ViewStates-can-lead-to-severe-RCE-vulnerabilities.html)
diff --git a/Upload Insecure Files/Zip Slip/README.md b/Upload Insecure Files/Zip Slip/README.md
new file mode 100644
index 0000000..39d647e
--- /dev/null
+++ b/Upload Insecure Files/Zip Slip/README.md	
@@ -0,0 +1,35 @@
+# Zip Slip
+
+> The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames (e.g. ../../shell.php). The Zip Slip vulnerability can affect numerous archive formats, including tar, jar, war, cpio, apk, rar and 7z. The attacker can then overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine. 
+
+## Summary
+
+- [Detection](#detection)
+- [Tools](#tools)
+* [Exploits](#exploits)
+  * [Basic Exploit](#basic-exploit)
+- [Additional Notes](#additional-notes)
+
+## Detection
+
+- Any zip upload page on the application
+
+## Tools
+
+- evilarc [https://github.com/ptoomey3/evilarc](https://github.com/ptoomey3/evilarc)
+
+## Exploits
+
+### Basic Exploit
+
+```python
+python evilarc.py shell.php -o unix -f shell.zip -p var/www/html/ -d 15
+```
+
+### Additional Notes
+- For affected libraries and projects, visit https://github.com/snyk/zip-slip-vulnerability
+
+## References
+
+- [Zip Slip Vulnerability - Snyk Ltd, 2019](https://snyk.io/research/zip-slip-vulnerability)
+- [Zip Slip - snyk, 2019](https://github.com/snyk/zip-slip-vulnerability)