PortSwigger/java-serialized-payloads external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

PortSwigger/java-serialized-payloads

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/PortSwigger/java-serialized-payloads)

Close

PortSwigger / java-serialized-payloadsView on GitHubMore

• External links
• Readme badge

YSOSERIAL Integration with burp suite

☆42Feb 10, 2022Updated 4 years ago

Alternatives and similar repositories for java-serialized-payloads

Users that are interested in java-serialized-payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• l3m0n / vulenv

  View on GitHub
  漏洞测试环境 - 方便写扫描器利用复现
  ☆27Aug 12, 2019Updated 6 years ago
• Qclover / CDNCheck

  View on GitHub
  Distinguish the site is used CDN
  ☆18Nov 8, 2018Updated 7 years ago
• 360quake / CobaltStrike_Phishing_Website

  View on GitHub
  ☆27Jun 17, 2021Updated 4 years ago
• 0c0c0f / security

  View on GitHub
  ☆33Dec 6, 2022Updated 3 years ago
• 0xbug / CVE-2019-8451

  View on GitHub
  https://jira.atlassian.com/browse/JRASERVER-69793
  ☆10Sep 16, 2019Updated 6 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• ChiChou / BadTokenizerPoc

  View on GitHub
  Abusing fts3_tokenizer
  ☆12Jan 18, 2016Updated 10 years ago
• jas502n / CVE-2018-3191

  View on GitHub
  Weblogic-CVE-2018-3191远程代码命令执行漏洞
  ☆68Oct 24, 2018Updated 7 years ago
• adityaks / sparty

  View on GitHub
  Sparty - MS Sharepoint and Frontpage Auditing Tool
  ☆33Aug 4, 2014Updated 11 years ago
• bigsizeme / CVE-2018-2893

  View on GitHub
  反弹shell生成器
  ☆17Jul 23, 2018Updated 7 years ago
• shengqi158 / Jackson-databind-RCE-PoC

  View on GitHub
  ☆83Jan 11, 2018Updated 8 years ago
• ring04h / Java-Deserialization-Scanner

  View on GitHub
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆11Jan 27, 2017Updated 9 years ago
• jas502n / CVE-2018-3245

  View on GitHub
  CVE-2018-3245
  ☆14Oct 25, 2018Updated 7 years ago
• erberkan / fortilogger_arbitrary_fileupload

  View on GitHub
  CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload (Metasploit)
  ☆22Feb 28, 2021Updated 5 years ago
• foxglovesec / httpscreenshot

  View on GitHub
  ☆16Oct 23, 2015Updated 10 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• brianlam38 / Sec-Dump

  View on GitHub
  All Security Engineering Resources
  ☆15Feb 2, 2018Updated 8 years ago
• kumina / nagios-plugins-kumina

  View on GitHub
  A collection of Nagios plugins that we package.
  ☆41Mar 22, 2016Updated 10 years ago
• summitt / burp-ysoserial

  View on GitHub
  YSOSERIAL Integration with burp suite
  ☆166Dec 16, 2022Updated 3 years ago
• CrackerCat / CallObfuscator

  View on GitHub
  Obfuscate specific windows apis with different apis
  ☆12Jul 31, 2024Updated last year
• Libraggbond / CVE-2018-3191

  View on GitHub
  CVE-2018-3191 反弹shell
  ☆63Oct 23, 2018Updated 7 years ago
• monkey-wenjun / get_icp_info

  View on GitHub
  模拟请求工信部查询备案信息
  ☆12Aug 29, 2018Updated 7 years ago
• cmeister2 / dauntless

  View on GitHub
  Tools for analysing the forward DNS data set published at https://scans.io/study/sonar.fdns_v2
  ☆17May 9, 2026Updated last month
• RandomsCTF / write-ups

  View on GitHub
  Write-ups for various CTF challenges solved by the team
  ☆16Oct 6, 2017Updated 8 years ago
• zhzyker / Goby-PoC

  View on GitHub
  some goby poc
  ☆15Apr 11, 2021Updated 5 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• tinymighty / wiki-seo

  View on GitHub
  A simple MediaWiki extension to give you control over the html title and meta tags via a tag or parser function.
  ☆17Jul 13, 2019Updated 6 years ago
• kirillwow / ids_bypass

  View on GitHub
  IDS Bypass tricks
  ☆122Jan 11, 2019Updated 7 years ago
• siliconblade / volatility

  View on GitHub
  volatility
  ☆21Nov 16, 2014Updated 11 years ago
• gorgiaxx / reGeorg

  View on GitHub
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆19Apr 9, 2018Updated 8 years ago
• hengyunabc / dubbo-apache-commons-collections-bug

  View on GitHub
  演示dubbo rpc Apache commons collections 的Java序列化漏洞
  ☆42Nov 13, 2015Updated 10 years ago
• zerothoughts / jndipoc

  View on GitHub
  Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
  ☆43Jan 22, 2016Updated 10 years ago
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆123Jan 9, 2018Updated 8 years ago
• fnmsd / ChunkedHTTPAdapter

  View on GitHub
  参考《利用分块传输吊打所有WAF》修改的requests的Adapter
  ☆98Jan 31, 2019Updated 7 years ago
• jndok / anchor

  View on GitHub
  Yet another dynamic routine hooking library for OS X. Uses Mach exception handlers.
  ☆11Feb 7, 2016Updated 10 years ago
• GPUs on demand by Runpod - Special Offer Available • Ad
  Run AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
• jakgibb / nagiosxi-root-rce-exploit

  View on GitHub
  POC which exploits a vulnerability within Nagios XI (5.6.5) to spawn a root shell
  ☆16Jul 17, 2021Updated 4 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• smiegles / crossdomain

  View on GitHub
  Exploit insecure crossdomain.xml files.
  ☆26Apr 25, 2017Updated 9 years ago
• 7Hxz233 / CTF

  View on GitHub
  This repo stores all challenges and writeups of CTFs we have participated in
  ☆35Dec 16, 2018Updated 7 years ago
• shengqi158 / CVE-2018-2628

  View on GitHub
  CVE-2018-2628 & CVE-2018-2893
  ☆78Jul 20, 2018Updated 7 years ago
• WhiteOakSecurity / GoAWSConsoleSpray

  View on GitHub
  Tool to spray AWS Console IAM Logins
  ☆35Jun 15, 2022Updated 3 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago