Contrast-Security-OSS/contrast-rO0 external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Contrast-Security-OSS/contrast-rO0

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Contrast-Security-OSS/contrast-rO0)

Close

Contrast-Security-OSS / contrast-rO0View on GitHubMore

• External links
• Readme badge

A tiny Java agent that blocks attacks against unsafe deserialization

☆88Oct 9, 2017Updated 8 years ago

Alternatives and similar repositories for contrast-rO0

Users that are interested in contrast-rO0 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• kantega / notsoserial

  View on GitHub
  Java Agent which mitigates deserialisation attacks by making certain classes unserializable
  ☆191May 17, 2016Updated 10 years ago
• ikkisoft / SerialKiller

  View on GitHub
  Look-Ahead Java Deserialization Library
  ☆422Jan 7, 2020Updated 6 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 7 years ago
• Contrast-Security-OSS / contrastscan-action

  View on GitHub
  Contrast Scan GitHub action
  ☆20May 4, 2026Updated 3 months ago
• Contrast-Security-OSS / joogle

  View on GitHub
  A static analysis API for finding deserialization attack gadgets
  ☆39Nov 7, 2022Updated 3 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆389Apr 16, 2022Updated 4 years ago
• mbechler / serianalyzer

  View on GitHub
  A static byte code analyzer for Java deserialization gadget research
  ☆251Apr 17, 2017Updated 9 years ago
• Jarijaas / helsec-1103

  View on GitHub
  ☆22Nov 3, 2022Updated 3 years ago
• dschadow / Java-Web-Security

  View on GitHub
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆221Updated this week
• frohoff / inspector-gadget

  View on GitHub
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆109May 12, 2016Updated 10 years ago
• topolik / ois-dos

  View on GitHub
  Java Deserialization
  ☆27Oct 21, 2016Updated 9 years ago
• planetlevel / jot

  View on GitHub
  Java Observability Toolkit
  ☆62May 27, 2024Updated 2 years ago
• nccgroup / jmxbf

  View on GitHub
  A brute force program to test weak accounts configured to access a JMX Registry
  ☆35Feb 1, 2017Updated 9 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 6 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• 5z1punch / AutoTypeDiscovery

  View on GitHub
  fastjson auto type derivation search
  ☆22Aug 19, 2021Updated 4 years ago
• iflody / codeql-workshop

  View on GitHub
  ☆12Aug 5, 2021Updated 5 years ago
• 0linlin0 / CyberBox

  View on GitHub
  Java Exp FrameWork
  ☆105Apr 23, 2021Updated 5 years ago
• matthiaskaiser / jmet

  View on GitHub
  Java Message Exploitation Tool
  ☆508Jul 6, 2022Updated 4 years ago
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,090Jun 15, 2021Updated 5 years ago
• cdaller / security_taint_propagation

  View on GitHub
  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.
  ☆28Oct 11, 2018Updated 7 years ago
• Contrast-Security-OSS / jinfinity

  View on GitHub
  An API for consuming all the memory of Java apps using deserialization
  ☆28Jan 10, 2016Updated 10 years ago
• wdeilim / Audit-Rules

  View on GitHub
  A curated list of audit rules which extract from Source Code Auditing tools.
  ☆15Feb 19, 2020Updated 6 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• Contrast-Security-OSS / vulnerable-spring-boot-application

  View on GitHub
  ☆18May 4, 2026Updated 3 months ago
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Jul 21, 2016Updated 10 years ago
• srcclr / efda

  View on GitHub
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆44May 4, 2022Updated 4 years ago
• Jinone / tools

  View on GitHub
  bugbounty tools
  ☆17Oct 26, 2023Updated 2 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆548Jan 1, 2019Updated 7 years ago
• Lucifaer / head_first_javarasp

  View on GitHub
  一些Java RASP demo
  ☆11Sep 26, 2019Updated 6 years ago
• foxglovesec / JavaUnserializeExploits

  View on GitHub
  ☆503Mar 10, 2016Updated 10 years ago
• Contrast-Security-OSS / NodeTestBench

  View on GitHub
  Intentionally Vulnerable Node Applications
  ☆16Mar 12, 2020Updated 6 years ago
• CycloneDX / sbom-comparator

  View on GitHub
  Lockheed Martin developed utility to compare two CycloneDX SBOMs
  ☆18Oct 21, 2021Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• NetSPI / JavaSerialKiller

  View on GitHub
  Burp extension to perform Java Deserialization Attacks
  ☆217Feb 2, 2024Updated 2 years ago
• Contrast-Security-OSS / docs

  View on GitHub
  ☆15Jun 5, 2020Updated 6 years ago
• codeplutos / Conference

  View on GitHub
  ☆28Sep 11, 2019Updated 6 years ago
• dome9 / cloud-supervisor

  View on GitHub
  Executing Dome9 Compliance engine assessments via API for continuous compliance and governance
  ☆10Jul 4, 2019Updated 7 years ago
• zhehaizitecongming / sa-jdi

  View on GitHub
  ☆15Aug 2, 2014Updated 12 years ago
• BishopFox / json-interop-vuln-labs

  View on GitHub
  Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"
  ☆210Mar 9, 2023Updated 3 years ago
• appc / build-repository

  View on GitHub
  Repository of tools to build ACIs for various projects (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆11May 7, 2015Updated 11 years ago