8 results found Sort:

189
1.6k
gpl-3.0
67
JNDIExploit or a ysoserial.
Created 2022-07-04
93 commits to main branch, last one 11 days ago
80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.
Created 2022-07-18
28 commits to master branch, last one 5 months ago
52
599
mit
13
ZKar is a Java serialization protocol analysis tool implement in Go.
Created 2021-07-09
108 commits to master branch, last one 3 months ago
46
392
gpl-3.0
8
JMX enumeration and attacking tool.
Created 2019-11-05
445 commits to master branch, last one about a year ago
22
176
unknown
5
proof-of-concept for generating Java deserialization payload | Proxy MemShell
Created 2023-12-25
108 commits to main branch, last one 5 months ago
20
141
apache-2.0
10
Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types
This repository has been archived (exclude archived)
Created 2021-12-07
12 commits to main branch, last one about a year ago
Java反序列化/JNDI注入/恶意类生成工具,支持多种高版本bypass,支持回显/内存马等多种扩展利用。
Created 2023-10-21
51 commits to master branch, last one 14 days ago
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Created 2022-01-09
14 commits to main branch, last one about a year ago