JavaSerialKiller

Deserialization Tool

A Burp extension that enables Java Deserialization Attacks using a payload generator tool

Burp extension to perform Java Deserialization Attacks

GitHub

208 stars
21 watching
97 forks
Language: Java
last commit: 10 months ago

Related projects:

Repository Description Stars
bishopfox/gadgetprobe Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities 585
ioactive/burpjdser-ng A tool to deserialize Java objects to XML and load classes/jars dynamically. 15
kantega/notsoserial An agent that prevents deserialization attacks by making certain classes unserializable 185
federicodotta/java-deserialization-scanner A plugin for detecting and exploiting vulnerabilities in Java deserialization 775
ikkisoft/serialkiller A Java deserialization library designed to secure applications by inspecting and controlling class loading during object deserialization 405
nccgroup/freddy A tool to detect and exploit deserialization vulnerabilities in Java and .NET applications. 573
directdefense/superserial A Burp Suite Extender to identify Java Deserialization vulnerabilities in client requests and server responses. 9
cschneider4711/swat An agent-based tool to create and manage a whitelist of whitelisted classes for protection against malicious Java deserialization attacks 29
netspi/burp-extensions Provides a central repository for creating and sharing extensions for the Burp Suite web testing tool 149
netspi/awssigner Tool to validate and generate AWS SigV4 signatures in Burp Suite extensions 86
mbechler/serianalyzer Analyzes Java bytecode to identify potential deserialization vulnerabilities. 241
netspi/jsonbeautifier A Java-based tool for improving the readability of JSON data used in Burp Suite 37
artsploit/yaml-payload A utility for generating deserialization payloads in SnakeYAML format to exploit certain security vulnerabilities 563
netspi/wsdler An extension for Burp to parse and analyze SOAP requests from WSDL files 214
kbss-cvut/jb4jsonld A Java library for serializing and deserializing objects to JSON-LD format using annotations. 12