java-deserialization

The cheat sheet about Java Deserialization vulnerabilities

A helpful Java Deserialization exploit framework.

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

xmind\code\articles for my personal blog 个人博客上的资源备份存储，也是个人分享的汇总

Compiled dataset of Java deserialization CVEs

an Evil Java RMI Registry.

Library for manually creating Java serialization data.

Java deserialization tool for creating encrypted and HMAC protected payloads.

maptool unauthenticated rce exploit <1.8.0 beta2b