https://github.com/frohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
https://github.com/frohoff/ysoserial

deserialization exploit gadget java javadeser jvm poc serialization vulnerability

Last synced: about 1 month ago
JSON representation

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

• Host: GitHub
• URL: https://github.com/frohoff/ysoserial
• Owner: frohoff
• License: mit
• Created: 2015-01-28T07:13:55.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2024-03-31T02:47:00.000Z (5 months ago)
• Last Synced: 2024-04-17T16:01:41.949Z (5 months ago)
• Topics: deserialization, exploit, gadget, java, javadeser, jvm, poc, serialization, vulnerability
• Language: Java
• Homepage: http://frohoff.github.io/appseccali-marshalling-pickles/
• Size: 452 KB
• Stars: 7,268
• Watchers: 217
• Forks: 1,709
• Open Issues: 42
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.txt

Awesome Lists containing this project

• awesome-bugbounty-tools - ysoserial - A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. (Exploitation / Insecure Deserialization)
• WebHackersWeapons - ysoserial - of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)| (Weapons / Tools)
• awesome-hacking-lists - frohoff/ysoserial - A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. (Java)