XStream-Gadgets
by chudyPB
Several XStream gadgets ported from ysoserial
AI summary
Exploitation gadgets
A collection of gadgets ported from ysoserial, transformed into the XStream serialization format to facilitate exploitation in Java applications.
- stars
- 32
- forks
- 5
- watching
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Bypass gadget collection
A collection of bypass gadgets to extend and wrap ysoserial payloads
Exploitation demo
A proof-of-concept project demonstrating exploitation of a vulnerability in Jackson-databind via Spring application contexts and expressions.
Exploitation tool
A tool that exploits vulnerabilities in web servers to execute arbitrary code
Exploitation tools
A collection of Cobalt Strike scripts designed to facilitate red teaming and exploitation
Browser Exploitation
An exploitation project demonstrating how to chain vulnerabilities in Safari to escalate privilege on macOS
Gadget search tool
A tool for searching and exploiting vulnerabilities in binary code using Return-Oriented Programming and Jump-Oriented Programming techniques.
Vulnerability report database
A comprehensive database of vulnerability and exploitation reports
XML exploit demo
A proof-of-concept web application demonstrating an XML External Entity vulnerability
Vulnerability scanner
Analyzes Java applications for potential deserialization gadget chains to help identify vulnerabilities and prioritize remediation.
Exploitation tool
An exploit kit designed to start an HTTP Server, RMI Server and LDAP Server to exploit Java web apps vulnerable to JNDI Injection
Widget library
An implementation of Jupyter interactive widgets in C++
Browser exploits
An in-depth exploration of browser exploitation techniques and vulnerability discovery
Vulnerability exploits
A collection of tools and techniques for exploiting vulnerabilities in Google services
Vulnerability scanner
A set of tools for gathering information and exploiting vulnerabilities in IBM Power Systems
XSS demo
A vulnerable blogging platform demonstrating various XSS vulnerabilities to showcase security weaknesses and demonstrate exploitation techniques.
