Alternatives and similar repositories for Java-Deserialization-CVEs

Users that are interested in Java-Deserialization-CVEs are comparing it to the libraries listed below

• peterjson31337 / tetctf2021
  tetctf2020_amf_writeups
  ☆23Updated 4 years ago
• Metnew / write-ups
  ☆34Updated 3 years ago
• artsploit / rogue-jndi
  A malicious LDAP server for JNDI injection attacks
  ☆75Updated last year
• redtimmy / Richsploit
  Exploitation toolkit for RichFaces
  ☆105Updated 2 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆106Updated 5 years ago
• pimps / gopher-tomcat-deployer
  Gopher Tomcat Deployer
  ☆48Updated 7 years ago
• synacktiv / burp-jq
  Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.
  ☆48Updated 4 years ago
• RandomRobbieBF / grafana-ssrf
  Authenticated SSRF in Grafana
  ☆83Updated last year
• detectify / Varnish-H2-Request-Smuggling
  ☆56Updated 4 years ago
• STMCyber / RmiTaste
  RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…
  ☆108Updated 5 years ago
• securifera / CVE-2019-1579
  ☆63Updated 6 years ago
• mzer0one / CVE-2020-7961-POC
  ☆118Updated 5 years ago
• PortSwigger / java-serialized-payloads
  YSOSERIAL Integration with burp suite
  ☆41Updated 3 years ago
• ka1n4t / CVE-2020-17530
  ☆65Updated 4 years ago
• arbazkiraak / web-cache-deception-checker
  Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages
  ☆44Updated 3 years ago
• SafeBreach-Labs / HRS
  ☆51Updated 5 years ago
• KTH-LangSec / SerialDetector
  A proof-of-concept tool for detection and exploitation Object Injection Vulnerabilities in .NET applications
  ☆63Updated 4 years ago
• osamahamad / CVE-2020-5410-POC
  CVE-2020-5410 Spring Cloud Config directory traversal vulnerability
  ☆31Updated 5 years ago
• PortSwigger / freddy-deserialization-bug-finder
  ☆43Updated 5 years ago
• FSecureLABS / N1QLMap
  The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
  ☆77Updated 5 years ago
• DrunkenShells / Disclosures
  Public Disclosures
  ☆91Updated 3 years ago
• EdoardoVignati / java-deserialization-of-untrusted-data-poc
  Some PoC (Proof-of-Concept) about vulnerability of java deserialization of untrusted data
  ☆26Updated 4 years ago
• pelaohxc / postMessageFinder
  ☆37Updated 5 years ago
• SbIm / ExtractSubdomainFromFDNS
  ExtractSubdomainFromFDNS, updating
  ☆33Updated 6 years ago
• minight / h2csmuggler
  ☆28Updated 5 years ago
• wrvenkat / burp-multistep-csrf-poc
  Burp extension to generate multi-step CSRF POC.
  ☆30Updated 6 years ago
• PortSwigger / json-web-token-attacker
  ☆108Updated 3 years ago
• MegadodoPublications / exploits
  Some of my public exploits
  ☆51Updated 5 years ago
• Voulnet / desharialize
  ☆103Updated 5 years ago
• andresriancho / websocket-fuzzer
  HTML5 WebSocket message fuzzer
  ☆147Updated 6 years ago