ysoserial topic

JMX enumeration and attacking tool.

qtc-de

ZKar is a Java serialization protocol analysis tool implement in Go.

phith0n

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

mandiant

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch

tdy218

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

cckuailong

RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets from ysoserial.

STMCyber

Some PoC (Proof-of-Concept) about vulnerability of java deserialization of untrusted data

EdoardoVignati

🌊 Dockerfiles for apps I use. Also take a look at https://github.com/security-dockerfiles

ilyaglow

It can be either a JNDIExploit or a ysoserial.

qi4L

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

emo-crab