javadeser

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

The cheat sheet about Java Deserialization vulnerabilities

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

Library for manually creating Java serialization data.