Contrast-Security-OSS/contrast-rO0 external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Contrast-Security-OSS/contrast-rO0

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Contrast-Security-OSS/contrast-rO0)

Close

Contrast-Security-OSS / contrast-rO0View on GitHubMore

• External links
• Readme badge

A tiny Java agent that blocks attacks against unsafe deserialization

☆88Oct 9, 2017Updated 9 years ago

Alternatives and similar repositories for contrast-rO0

Users that are interested in contrast-rO0 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• kantega / notsoserial

  View on GitHub
  Java Agent which mitigates deserialisation attacks by making certain classes unserializable
  ☆191May 17, 2016Updated 10 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 7 years ago
• pixee / java-security-toolkit

  View on GitHub
  A set of security APIs meant to help secure Java code
  ☆25Updated this week
• victims / victims-client-java-legacy

  View on GitHub
  Standalone victims client to handle java artifacts.
  ☆11Dec 8, 2017Updated 8 years ago
• Contrast-Security-OSS / contrastscan-action

  View on GitHub
  Contrast Scan GitHub action
  ☆20May 4, 2026Updated 5 months ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• Contrast-Security-OSS / joogle

  View on GitHub
  A static analysis API for finding deserialization attack gadgets
  ☆39Nov 7, 2022Updated 3 years ago
• mbechler / serianalyzer

  View on GitHub
  A static byte code analyzer for Java deserialization gadget research
  ☆252Apr 17, 2017Updated 9 years ago
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆390Apr 16, 2022Updated 4 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 7 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 7 years ago
• dschadow / Java-Web-Security

  View on GitHub
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆222Oct 15, 2026Updated 2 weeks ago
• Jarijaas / helsec-1103

  View on GitHub
  ☆22Nov 3, 2022Updated 3 years ago
• frohoff / inspector-gadget

  View on GitHub
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆110May 12, 2016Updated 10 years ago
• topolik / ois-dos

  View on GitHub
  Java Deserialization
  ☆27Oct 21, 2016Updated 10 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• nccgroup / jmxbf

  View on GitHub
  A brute force program to test weak accounts configured to access a JMX Registry
  ☆35Feb 1, 2017Updated 9 years ago
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,093Jun 15, 2021Updated 5 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• planetlevel / jot

  View on GitHub
  Java Observability Toolkit
  ☆64Updated this week
• NetSPI / JavaSerialKiller

  View on GitHub
  Burp extension to perform Java Deserialization Attacks
  ☆217Feb 2, 2024Updated 2 years ago
• Contrast-Security-OSS / jinfinity

  View on GitHub
  An API for consuming all the memory of Java apps using deserialization
  ☆28Jan 10, 2016Updated 10 years ago
• matthiaskaiser / jmet

  View on GitHub
  Java Message Exploitation Tool
  ☆506Jul 6, 2022Updated 4 years ago
• cdaller / security_taint_propagation

  View on GitHub
  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.
  ☆28Oct 11, 2018Updated 8 years ago
• breenmachine / JavaUnserializeExploits

  View on GitHub
  ☆136Nov 6, 2015Updated 10 years ago
• Bare Metal GPUs on DigitalOcean Gradient AI • Ad
  Purpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
• appc / build-repository

  View on GitHub
  Repository of tools to build ACIs for various projects (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆11May 7, 2015Updated 11 years ago
• CycloneDX / sbom-comparator

  View on GitHub
  Lockheed Martin developed utility to compare two CycloneDX SBOMs
  ☆18Oct 21, 2021Updated 5 years ago
• hackvertor / clickbandit

  View on GitHub
  A JavaScript clickjacking PoC generator
  ☆24Jul 3, 2019Updated 7 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆544Jan 1, 2019Updated 7 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• Lucifaer / head_first_javarasp

  View on GitHub
  一些Java RASP demo
  ☆11Sep 26, 2019Updated 7 years ago
• eclipse-jbom / jbom

  View on GitHub
  ☆123Apr 15, 2025Updated last year
• secopsconsult / powershell

  View on GitHub
  Useful Powershell modules.
  ☆11Mar 10, 2017Updated 9 years ago
• iagox86 / poracle

  View on GitHub
  ☆93Jan 17, 2019Updated 7 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• andresriancho / pico

  View on GitHub
  Tool to identify and exploit timing attacks
  ☆11Jul 7, 2016Updated 10 years ago
• LeakIX / l9plugins

  View on GitHub
  LeakIX maintained plugins implementing the l9format golang plugin interface.
  ☆12Dec 9, 2021Updated 4 years ago
• Contrast-Security-OSS / NodeTestBench

  View on GitHub
  Intentionally Vulnerable Node Applications
  ☆16Mar 12, 2020Updated 6 years ago
• regulatre / ipv6-scan-detective

  View on GitHub
  Uncover IPv6 address harvesting through firewall log analysis
  ☆13Jan 29, 2016Updated 10 years ago
• srcclr / efda

  View on GitHub
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆44May 4, 2022Updated 4 years ago
• Contrast-Security-OSS / docs

  View on GitHub
  ☆15Jun 5, 2020Updated 6 years ago
• federicodotta / Java-Deserialization-Scanner

  View on GitHub
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆804Nov 7, 2021Updated 4 years ago