Alternatives and similar repositories for SerialKiller:

Users that are interested in SerialKiller are comparing it to the libraries listed below

• kantega / notsoserial
  Java Agent which mitigates deserialisation attacks by making certain classes unserializable
  ☆188Updated 8 years ago
• matthiaskaiser / jmet
  Java Message Exploitation Tool
  ☆502Updated 2 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆784Updated 3 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆352Updated 3 years ago
• JackOfMostTrades / gadgetinspector
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,026Updated 3 years ago
• NickstaDB / BaRMIe
  Java RMI enumeration and attack tool.
  ☆731Updated 7 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆243Updated 8 years ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆106Updated 8 years ago
• NickstaDB / SerializationDumper
  A tool to dump Java serialization streams in a more human readable form.
  ☆1,028Updated 10 months ago
• dschadow / JavaSecurity
  Java web and command line applications demonstrating various security topics
  ☆237Updated 2 weeks ago
• foxglovesec / JavaUnserializeExploits
  ☆493Updated 9 years ago
• frohoff / marshalsec
  ☆74Updated 7 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆236Updated 6 years ago
• Contrast-Security-OSS / contrast-rO0
  A tiny Java agent that blocks attacks against unsafe deserialization
  ☆83Updated 7 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆576Updated 3 years ago
• welk1n / JNDI-Injection-Bypass
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆478Updated 4 years ago
• coverity / coverity-security-library
  Coverity Security Library (CSL) is a lightweight set of escaping routines for fixing cross-site scripting (XSS), SQL injection, and other…
  ☆201Updated 8 years ago
• PaulSec / HQLmap
  (Deprecated) HQLmap, Automatic tool to exploit HQL injections
  ☆229Updated 5 years ago
• breenmachine / JavaUnserializeExploits
  ☆133Updated 9 years ago
• LeadroyaL / fastjson-blacklist
  ☆804Updated 2 years ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆659Updated last year
• shengqi158 / fastjson-remote-code-execute-poc
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆404Updated 2 years ago
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆501Updated 3 years ago
• dschadow / Java-Web-Security
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆217Updated 2 weeks ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆211Updated last year
• Cryin / JavaID
  java source code static code analysis and danger function identify prog
  ☆535Updated 6 years ago
• pwntester / JRE8u20_RCE_Gadget
  JRE8u20_RCE_Gadget
  ☆251Updated 8 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆592Updated 3 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 2 years ago
• ESAPI / esapi-java
  ☆330Updated 2 years ago