chudyPB/XStream-Gadgets external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

chudyPB/XStream-Gadgets

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/chudyPB/XStream-Gadgets)

Close

chudyPB / XStream-GadgetsView on GitHubMore

• External links
• Readme badge

Several XStream gadgets ported from ysoserial

☆33Sep 26, 2021Updated 4 years ago

Alternatives and similar repositories for XStream-Gadgets

Users that are interested in XStream-Gadgets are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• feihong-cs / Attacking_Shiro_with_CVE_2020_2555

  View on GitHub
  ☆50Mar 30, 2021Updated 5 years ago
• testanull / ProjectSIM

  View on GitHub
  ☆13Dec 22, 2020Updated 5 years ago
• Lucifaer / Joker

  View on GitHub
  一个Java攻击框架
  ☆22Nov 27, 2020Updated 5 years ago
• Marcono1234 / codeql-jdk-docker

  View on GitHub
  Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK
  ☆49Jan 7, 2024Updated 2 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆450Sep 10, 2021Updated 4 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• Dor-Tumarkin / CVE-2021-25641-Proof-of-Concept

  View on GitHub
  Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…
  ☆53Jun 6, 2021Updated 5 years ago
• samsbp / java-file-ftp

  View on GitHub
  POC for leaking java version through file and ftp protocols
  ☆24Nov 1, 2020Updated 5 years ago
• Ppsoft1991 / CodeReviewTools

  View on GitHub
  通过正则搜索、批量反编译特定Jar包中的class名称
  ☆322Dec 9, 2021Updated 4 years ago
• securingdev / custom-codeql-queries

  View on GitHub
  Custom / Experimental CodeQL queries
  ☆37Apr 21, 2022Updated 4 years ago
• synacktiv / QLinspector

  View on GitHub
  Finding Java/C# gadget chains with CodeQL
  ☆189Jun 22, 2026Updated last month
• Scorpio-m7 / tomcat-backdoor

  View on GitHub
  ☆55Dec 29, 2021Updated 4 years ago
• evilAdan0s / WindowsDomainAbout

  View on GitHub
  Windows域安全相关概念、协议、流程
  ☆137Nov 7, 2021Updated 4 years ago
• JetP1ane / AMSI

  View on GitHub
  Golang AMSI Bypass
  ☆23Oct 17, 2021Updated 4 years ago
• cldrn / codeql-queries

  View on GitHub
  My CodeQL queries collection
  ☆98Aug 28, 2023Updated 2 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• masatokinugawa / css-exfiltration-svg-font

  View on GitHub
  ☆18Nov 28, 2021Updated 4 years ago
• threedr3am / FindClassInJars

  View on GitHub
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Mar 25, 2020Updated 6 years ago
• fynch3r / Gadgets

  View on GitHub
  Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。
  ☆420Dec 3, 2021Updated 4 years ago
• QAX-A-Team / dcpwn

  View on GitHub
  an impacket-dependent script exploiting CVE-2019-1040
  ☆72Jan 1, 2021Updated 5 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆214May 19, 2020Updated 6 years ago
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆375Jul 31, 2024Updated last year
• YoungRichOG / Hosts_Boom

  View on GitHub
  通过hosts碰撞发现目标内部系统，扩大攻击面。
  ☆46Aug 11, 2021Updated 4 years ago
• GitHubSecurityLab / ruby-unsafe-deserialization

  View on GitHub
  Proof of Concepts for unsafe deserialization in Ruby
  ☆17Oct 17, 2024Updated last year
• Y4er / yaml-payload

  View on GitHub
  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
  ☆136Sep 24, 2020Updated 5 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• gagliardetto / lgtm-cli

  View on GitHub
  *Unofficial* lgtm.com CLI — Use at your own risk. Also don't add more than 3K projects to "My projects" list.
  ☆13Feb 21, 2022Updated 4 years ago
• TheKingOfDuck / hostnamePot

  View on GitHub
  通过Web获取访客机器的hostname字段内容。
  ☆65Oct 19, 2021Updated 4 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆257Jul 30, 2021Updated 4 years ago
• mi1k7ea / M7-03

  View on GitHub
  个人使用的一款Web CMS指纹扫描器
  ☆25Aug 4, 2020Updated 5 years ago
• 0Kee-Team / CatchMail

  View on GitHub
  CatchMail can be used to find some email addresses!
  ☆73May 22, 2023Updated 3 years ago
• A-D-Team / attackRmi

  View on GitHub
  ☆231Jan 3, 2022Updated 4 years ago
• hktalent / CVE_2020_2546

  View on GitHub
  CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc pyth…
  ☆133Mar 5, 2023Updated 3 years ago
• Jarijaas / helsec-1103

  View on GitHub
  ☆22Nov 3, 2022Updated 3 years ago
• voidfyoo / rwctf-2021-old-system

  View on GitHub
  ☆77Jan 12, 2021Updated 5 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• laluka / jolokia-exploitation-toolkit

  View on GitHub
  jolokia-exploitation-toolkit
  ☆319Dec 19, 2024Updated last year
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆616Dec 29, 2021Updated 4 years ago
• advanced-security / custom-codeql-bundle

  View on GitHub
  An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…
  ☆25Jun 27, 2022Updated 4 years ago
• WyAtu / PentestScripts

  View on GitHub
  Some scripts for penetration testing
  ☆30Dec 29, 2018Updated 7 years ago
• airman604 / jdbc-backdoor

  View on GitHub
  A fake JDBC driver that allows OS command execution.
  ☆126Oct 2, 2022Updated 3 years ago
• Al1ex / FastJsonAutoTypeBypass

  View on GitHub
  FastJsonAutoTypeBypass
  ☆16Apr 14, 2021Updated 5 years ago