Alternatives and similar repositories for ysoserial

Users that are interested in ysoserial are comparing it to the libraries listed below

• novysodope / AMF_JRMP

  View on GitHub
  改造一个基于jrmp的AMF反序列化利用工具
  ☆16Jul 7, 2022Updated 3 years ago
• woodpecker-appstore / plugin-example

  View on GitHub
  woodpecker 漏洞插件开发的简单示范，用于插件的快速上手
  ☆27May 4, 2021Updated 4 years ago
• 1nhann / Autoattack

  View on GitHub
  awd attack framework，Django + Mysql
  ☆16Feb 8, 2025Updated last year
• iiiusky / java_rasp_example

  View on GitHub
  ☆28Jul 18, 2020Updated 5 years ago
• Inull-Studio / php_jsp_asp_webshell

  View on GitHub
  php webshell bypass D盾、safedog、360、火绒等，仅支持php7
  ☆18Aug 25, 2025Updated 5 months ago
• R0ser1 / GadgetInspector

  View on GitHub
  关于GadgetInspector的二开的一些思考和改进。
  ☆18Sep 4, 2023Updated 2 years ago
• wafinfo / ezOFFICE_Decrypt

  View on GitHub
  万户数据库解密
  ☆21Dec 3, 2023Updated 2 years ago
• Lotus6 / Keylogger

  View on GitHub
  从cs4.2反编译后提取的web端键盘记录，记录web页面输入的所有文本内容。
  ☆11Aug 16, 2021Updated 4 years ago
• Ruil1n / helm-tiller-pwn

  View on GitHub
  ☆16Jan 5, 2021Updated 5 years ago
• W1one / FastJsonAttack

  View on GitHub
  fastjson全版本漏洞利用工具，只支持POST
  ☆10Jan 5, 2021Updated 5 years ago
• tabby-sec / tabby-intellij-plugin

  View on GitHub
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆39Nov 12, 2024Updated last year
• luelueking / ClazzSearcher

  View on GitHub
  一款使用Yaml定义搜索规则来搜索Class的工具
  ☆108Aug 2, 2023Updated 2 years ago
• ATNX / javaweb-rasp

  View on GitHub
  ☆38Oct 26, 2021Updated 4 years ago
• su18 / JSP-Webshells

  View on GitHub
  Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
  ☆15Sep 22, 2021Updated 4 years ago
• ReptilianPride / windows-login-phish

  View on GitHub
  This is a windows maching login page designed using HTML, CSS and JS. This can be used for red teaming or cybersecurity awareness related…
  ☆18Mar 25, 2022Updated 3 years ago
• Rvn0xsy / DumperAnalyze

  View on GitHub
  通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作
  ☆116Jun 18, 2024Updated last year
• saarsec / saarctf-2022

  View on GitHub
  Services, Checkers and Exploits from saarCTF 2022. https://ctf.saarland
  ☆14May 24, 2022Updated 3 years ago
• aaaademo / Confluence-EvilJar

  View on GitHub
  配合 CVE-2023-22515 后台上传jar包实现RCE
  ☆23Nov 9, 2023Updated 2 years ago
• shengshengli / AttackWebFrameworkTools-5.0

  View on GitHub
  本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:…
  ☆17May 22, 2022Updated 3 years ago
• Jarijaas / helsec-1103

  View on GitHub
  ☆22Nov 3, 2022Updated 3 years ago
• HorizonTEL / Anti-Virus-PHP

  View on GitHub
  【随机动态生成】php免杀webshell
  ☆19Mar 28, 2022Updated 3 years ago
• Fushuling / fastjson_mysql

  View on GitHub
  Fastjson + MySQL 条件下不出网利用测试环境
  ☆49Dec 6, 2025Updated 2 months ago
• 4nth0ny1130 / shisoserial

  View on GitHub
  一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.
  ☆24Jul 6, 2022Updated 3 years ago
• BeichenDream / JDR

  View on GitHub
  ☆146Jan 16, 2023Updated 3 years ago
• Jun-5heng / CVE-2021-22005

  View on GitHub
  VMware vCenter Server任意文件上传漏洞 / Code By:Jun_sheng
  ☆21Jul 8, 2022Updated 3 years ago
• ihacku / winhardening

  View on GitHub
  windows 加固脚本
  ☆20Jun 9, 2020Updated 5 years ago
• woodpecker-appstore / BCELConverter

  View on GitHub
  BCEL class转换插件
  ☆25Apr 5, 2021Updated 4 years ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• threedr3am / FindClassInJars

  View on GitHub
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Mar 25, 2020Updated 5 years ago
• pen4uin / java-echo-generator

  View on GitHub
  一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.
  ☆460Jan 12, 2025Updated last year
• kezibei / Urldns

  View on GitHub
  ☆341Oct 11, 2025Updated 4 months ago
• evilashz / PIGADVulnScanner

  View on GitHub
  检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare
  ☆79Oct 23, 2023Updated 2 years ago
• Mr-xn / CVE-2022-21371

  View on GitHub
  Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion
  ☆27Jan 25, 2022Updated 4 years ago
• sf197 / MemoryShellHunter

  View on GitHub
  Java Agent memory horse scanner combined with Call Graph modus
  ☆65Dec 26, 2022Updated 3 years ago
• blipzip / cve-2022-31692

  View on GitHub
  A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
  ☆35Nov 7, 2022Updated 3 years ago
• RicterZ / unserchain

  View on GitHub
  ☆34Nov 4, 2018Updated 7 years ago
• 4ra1n / java-gate

  View on GitHub
  Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders
  ☆195Jul 7, 2023Updated 2 years ago
• 1nhann / vulns

  View on GitHub
  ☆31Aug 21, 2022Updated 3 years ago
• Esonhugh / Docker-Release-Agent-Escape

  View on GitHub
  Docker 逃逸 Release Agent 利用始末
  ☆68Nov 2, 2022Updated 3 years ago