How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
ysoserial.net is a payload generator for .NET deserialization, designed to create malicious serialized objects and structured gadget chains. It serves as a tool for generating command execution strings and security testing suites used to assess vulnerabilities in .NET formatters. The tool enables the creation of sequences of object calls that trigger remote code execution during the reconstruction of serialized data. It produces specialized payloads for executing system commands, loading remote libraries, and accessing local file systems. The project includes capabilities for optimizing payl
All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
W13scan is an automated vulnerability assessment tool designed to identify security flaws in web applications through a modular plugin architecture. It functions as a scanning engine that executes specialized security logic against web endpoints to detect injection flaws, information leaks, and configuration errors. The platform distinguishes itself by combining active probing with passive traffic analysis and out-of-band detection. It utilizes a callback-based service to verify blind vulnerabilities that do not provide immediate feedback, and it operates as a proxy to intercept and inspect l
Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
The main features of bishopfox/gadgetprobe are: Security Utilities, Deserialization Vulnerabilities, Insecure Deserialization, Web Application Scanning.
Open-source alternatives to bishopfox/gadgetprobe include: federicodotta/java-deserialization-scanner — All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities. pwntester/ysoserial.net — ysoserial.net is a payload generator for .NET deserialization, designed to create malicious serialized objects and… w-digital-scanner/w13scan — W13scan is an automated vulnerability assessment tool designed to identify security flaws in web applications through… allyomalley/dnsobserver. asciimoo/wuzz — Wuzz is an interactive command line HTTP client and request inspector designed for capturing, reviewing, and analyzing… arturss7/tuktuk.