14 repository-uri
Awesome GitHub RepositoriesDeserialization Exploits
Tools for exploiting Java and PHP deserialization vulnerabilities.
Explore 14 awesome GitHub repositories matching part of an awesome list · Deserialization Exploits. Refine with filters or upvote what's useful.
Awesome Deserialization Exploits GitHub Repositories
Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
- frohoff/ysoserial
frohoff/ysoserial
8,750Vezi pe GitHubysoserial is a security research tool and payload generator designed to identify and exploit insecure Java deserialization. It functions as a framework for creating malicious serialized objects that can trigger remote code execution on Java virtual machines. The project provides a library of known gadget chains, which are sequences of vulnerable class calls that achieve arbitrary command execution during the deserialization process. It automates the generation of these payloads by leveraging common third-party libraries. The tool covers capabilities for security penetration testing, Java app
Tool for generating Java deserialization payloads.
Javadeserializationexploitgadget - ambionics/phpggc
ambionics/phpggc
3,832Vezi pe GitHubphpggc is a security assessment utility and command-line tool designed for the automated generation, obfuscation, and wrapping of serialized object chains. It functions as a gadget chain framework used to identify and verify remote code execution vectors by testing for PHP object injection vulnerabilities. The project provides a modular system for constructing complex serialized object sequences and includes a dedicated payload obfuscator to transform byte streams for bypassing web application firewalls and security filters. It also features a generator for wrapping serialized data into archi
Tool for generating PHP deserialization payloads.
PHP - mbechler/marshalsec
mbechler/marshalsec
3,691Vezi pe GitHubMarshalsec is a toolkit designed for generating malicious serialized Java objects to achieve remote code execution during the unmarshalling process. It functions as a Java deserialization exploit tool and a framework for triggering Java Naming and Directory Interface lookups to remote servers. The project provides a JNDI redirector service that intercepts lookups and points targets toward a remote codebase. It includes utilities for crafting payloads that force Java applications to download and execute arbitrary classes from a remote URL. The toolset covers security analysis activities inclu
Tool for researching and exploiting Java deserialization.
Java - welk1n/jndi-injection-exploit
welk1n/JNDI-Injection-Exploit
2,814Vezi pe GitHubJNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
Tool for JNDI injection exploitation.
Java - qi4l/jyso
qi4L/JYso
1,752Vezi pe GitHubJNDIExploit or a ysoserial.
Tool for generating Java deserialization payloads.
Javaattackgadgetjava - wh1t3p1g/ysomap
wh1t3p1g/ysomap
1,240Vezi pe GitHubA helpful Java Deserialization exploit framework.
Tool for managing and generating deserialization payloads.
Javaexploitation-frameworkjava-deserialization
