Alternatives and similar repositories for SerialKiller:

Users that are interested in SerialKiller are comparing it to the libraries listed below

• kantega / notsoserial
  Java Agent which mitigates deserialisation attacks by making certain classes unserializable
  ☆188Updated 8 years ago
• matthiaskaiser / jmet
  Java Message Exploitation Tool
  ☆495Updated 2 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆240Updated 7 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆351Updated 2 years ago
• NickstaDB / BaRMIe
  Java RMI enumeration and attack tool.
  ☆724Updated 7 years ago
• foxglovesec / JavaUnserializeExploits
  ☆491Updated 8 years ago
• dschadow / JavaSecurity
  Java web and command line applications demonstrating various security topics
  ☆235Updated last week
• Contrast-Security-OSS / contrast-rO0
  A tiny Java agent that blocks attacks against unsafe deserialization
  ☆83Updated 7 years ago
• NickstaDB / SerializationDumper
  A tool to dump Java serialization streams in a more human readable form.
  ☆1,005Updated 6 months ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆104Updated 8 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆778Updated 3 years ago
• JackOfMostTrades / gadgetinspector
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,009Updated 3 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆237Updated 5 years ago
• frohoff / marshalsec
  ☆73Updated 7 years ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆650Updated last year
• shengqi158 / fastjson-remote-code-execute-poc
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆404Updated 2 years ago
• dschadow / Java-Web-Security
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆215Updated this week
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆574Updated 3 years ago
• welk1n / JNDI-Injection-Bypass
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆475Updated 4 years ago
• breenmachine / JavaUnserializeExploits
  ☆132Updated 9 years ago
• ESAPI / esapi-java
  ☆328Updated 2 years ago
• topolik / ois-dos
  Java Deserialization
  ☆26Updated 8 years ago
• ozzi- / JWT4B
  JWT Support for Burp
  ☆249Updated 5 months ago
• PaulSec / HQLmap
  (Deprecated) HQLmap, Automatic tool to exploit HQL injections
  ☆227Updated 4 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 2 years ago
• zerothoughts / spring-jndi
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116Updated 5 years ago
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆497Updated 2 years ago
• mogwaisec / mjet
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆172Updated 8 years ago
• LeadroyaL / fastjson-blacklist
  ☆798Updated 2 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆209Updated 11 months ago