EdoardoVignati/java-deserialization-of-untrusted-data-poc external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

EdoardoVignati/java-deserialization-of-untrusted-data-poc

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/EdoardoVignati/java-deserialization-of-untrusted-data-poc)

Close

EdoardoVignati / java-deserialization-of-untrusted-data-pocView on GitHubMore

• External links
• Readme badge

Some PoC (Proof-of-Concept) about vulnerability of java deserialization of untrusted data

☆26Jul 12, 2021Updated 4 years ago

Alternatives and similar repositories for java-deserialization-of-untrusted-data-poc

Users that are interested in java-deserialization-of-untrusted-data-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• pwntester / XStreamPOC

  View on GitHub
  POC for XStream RCE
  ☆13Dec 23, 2013Updated 12 years ago
• langligelang / maobugs

  View on GitHub
  java 漏洞平台包含各种CVE
  ☆23Jun 17, 2022Updated 3 years ago
• GrrrDog / Sploits

  View on GitHub
  Place for random PoCs
  ☆18May 21, 2020Updated 5 years ago
• tin-z / narly.js

  View on GitHub
  narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)
  ☆15Nov 14, 2022Updated 3 years ago
• kanav99 / github-java-ctf

  View on GitHub
  Winning submission for the GitHub Security Lab CTF 4: CodeQL and Chill - The Java Edition
  ☆19Jun 25, 2020Updated 5 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• iflody / codeql-workshop

  View on GitHub
  ☆12Aug 5, 2021Updated 4 years ago
• zhzhdoai / Weblogic_Vuln

  View on GitHub
  CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC
  ☆17Aug 11, 2020Updated 5 years ago
• m3ssap0 / spring-break_cve-2017-8046

  View on GitHub
  This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).
  ☆17Jun 4, 2021Updated 4 years ago
• zhazhami / upload-fuzzer

  View on GitHub
  Upload Fuzzer for Burpsuite
  ☆17Aug 23, 2018Updated 7 years ago
• pysqz / plugo

  View on GitHub
  a simple golang plugin framework
  ☆12Jun 22, 2017Updated 8 years ago
• EXP-Docs / CVE-2020-13933

  View on GitHub
  CVE-2020-13933 靶场： shiro 认证绕过漏洞
  ☆14Apr 9, 2023Updated 2 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• any-how / Getinfo_phpinfo

  View on GitHub
  提取phpinfo()敏感信息
  ☆11Nov 23, 2018Updated 7 years ago
• JoyChou93 / md5-extension-attack

  View on GitHub
  MD5长度扩展攻击
  ☆40Jun 8, 2016Updated 9 years ago
• Wordpress hosting with auto-scaling on Cloudways • Ad
  Fully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
• Al1ex / CVE-2020-5902

  View on GitHub
  CVE-2020-5902
  ☆10Jul 11, 2020Updated 5 years ago
• tin-z / GDBleed

  View on GitHub
  Dynamic-Static binary instrumentation framework on top of GDB
  ☆50Sep 25, 2023Updated 2 years ago
• jas502n / CVE-2020-26259

  View on GitHub
  CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…
  ☆25Dec 13, 2020Updated 5 years ago
• murataydemir / CVE-2020-14883

  View on GitHub
  [CVE-2020-14882] Oracle WebLogic Server Authenticated Remote Code Execution (RCE)
  ☆13Nov 9, 2020Updated 5 years ago
• ETOCheney / phpAudit

  View on GitHub
  一个简单的php危险函数检测工具
  ☆10Dec 19, 2018Updated 7 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• tricking-io / contribution

  View on GitHub
  梧桐百科投稿通道
  ☆22May 21, 2018Updated 7 years ago
• retanoj / BurpMultiProxy

  View on GitHub
  ☆13Feb 17, 2016Updated 10 years ago
• lz2y / DubboPOC

  View on GitHub
  Apache Dubbo漏洞测试Demo及其POC
  ☆65Mar 27, 2023Updated 3 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• Pure-T / deflat

  View on GitHub
  use angr to deobfuscation
  ☆10Oct 8, 2019Updated 6 years ago
• Dido1960 / Weblogic-CVE-2020-2551-To-Internet

  View on GitHub
  CVE-2020-2551 POC to use in Internet
  ☆22May 26, 2020Updated 5 years ago
• richardzhangcmplx / Dubbo-deserialization

  View on GitHub
  [CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE
  ☆18Mar 17, 2025Updated last year
• PalindromeLabs / Java-Deserialization-CVEs

  View on GitHub
  Compiled dataset of Java deserialization CVEs
  ☆60Aug 31, 2020Updated 5 years ago
• carstein / vsf

  View on GitHub
  Very Simple Fuzzer
  ☆21Jun 12, 2020Updated 5 years ago
• anunay-bhatt / secure-serverless-reference-architecture

  View on GitHub
  A walkthrough of security controls for a serverless architecture via a demo application
  ☆11May 11, 2022Updated 3 years ago
• tin-z / CVE-2021-20294-POC

  View on GitHub
  Simple CVE-2021-20294 poc
  ☆11Jan 21, 2023Updated 3 years ago
• knqyf263 / CVE-2018-1273

  View on GitHub
  Environment for CVE-2018-1273 (Spring Data Commons)
  ☆10Aug 15, 2018Updated 7 years ago
• pwntester / SpringBreaker

  View on GitHub
  Exploit PoC for Spring RCE issue (CVE-2011-2894)
  ☆44Dec 17, 2023Updated 2 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆387Apr 16, 2022Updated 3 years ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet

  View on GitHub
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆54Sep 11, 2021Updated 4 years ago
• secoba / HLog

  View on GitHub
  Burpsuite HTTP 插件，主要用于内网测试，可定制Content-Type和Response Content
  ☆24Jul 2, 2018Updated 7 years ago
• mjwhitta / win

  View on GitHub
  Windows API/constants, identity, and WinHTTP/WinINet for Go.
  ☆19Mar 6, 2026Updated 3 weeks ago
• mi1k7ea / M7-03

  View on GitHub
  个人使用的一款Web CMS指纹扫描器
  ☆25Aug 4, 2020Updated 5 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• welk1n / FastjsonPocs

  View on GitHub
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Oct 29, 2019Updated 6 years ago