ysoserial
by frohoff
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
AI summary
Deserialization exploit tool
Generates payloads to exploit unsafe Java object deserialization vulnerabilities
- stars
- 7.9K
- forks
- 1.8K
- watching
- 213
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Deserialization payloads
Generates payloads to exploit unsafe .NET object deserialization.
Java deserialization guide
A cheat sheet providing guidance on deserialization vulnerabilities in Java applications
Deserialization scanner
Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities
Deserialization discussion
A presentation and discussion on the security risks of deserialization in Java object graphs.
Deserialization payload generator
A utility for generating deserialization payloads in SnakeYAML format to exploit certain security vulnerabilities
Deserialization vulnerability lab
A lab project providing code samples and tools to understand deserialization vulnerabilities in Java applications.
Vulnerability scanner
Analyzes Java applications for potential deserialization gadget chains to help identify vulnerabilities and prioritize remediation.
Deserialization Tool
A Burp extension that enables Java Deserialization Attacks using a payload generator tool
Deserialization shield
An agent that prevents deserialization attacks by making certain classes unserializable
Class loader and deserialization utility
A tool to deserialize Java objects to XML and load classes/jars dynamically.
App generator
A development platform to generate and deploy modern web applications using various frameworks and tools.
Deserialization exploit
Reproducing and analyzing the CVE-2021-29505 vulnerability in Java's XStream deserialization process
Deserialization scanner
A plugin for detecting and exploiting vulnerabilities in Java deserialization
Code exploitation tool
Analyzes and exploits vulnerabilities in Java marshalling libraries to demonstrate potential code execution
RMI vulnerability demo
Demonstrating vulnerabilities in Java RMI services
Featured in 1 awesome list
Each link jumps to the spot where the list mentions ysoserial.
