Alternatives and similar repositories for notsoserial

Users that are interested in notsoserial are comparing it to the libraries listed below

• Contrast-Security-OSS / contrast-rO0
  A tiny Java agent that blocks attacks against unsafe deserialization
  ☆86Updated 8 years ago
• ikkisoft / SerialKiller
  Look-Ahead Java Deserialization Library
  ☆421Updated 5 years ago
• victims / maven-security-versions
  Identify vulnerable libraries in Maven dependencies
  ☆46Updated 3 years ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆108Updated 9 years ago
• topolik / ois-dos
  Java Deserialization
  ☆27Updated 9 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 3 years ago
• cschneider4711 / SWAT
  Serial Whitelist Application Trainer
  ☆30Updated 6 years ago
• frohoff / marshalsec
  ☆75Updated 8 years ago
• dschadow / JavaSecurity
  Java web and command line applications demonstrating various security topics
  ☆237Updated 3 weeks ago
• GDSSecurity / GDS-PMD-Security-Rules
  Custom security ruleset for the popular Java static analysis tool PMD.
  ☆61Updated 10 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆251Updated 8 years ago
• foxglovesec / JavaUnserializeExploits
  ☆498Updated 9 years ago
• hdiv / hdiv
  Hdiv CE | Application Self-Protection
  ☆218Updated last year
• fuzzitdev / javafuzz
  coverage guided fuzz testing for java
  ☆228Updated 4 years ago
• victims / victims-enforcer-legacy
  A rule for the Maven enforcer plugin to check for vulnerable artifacts within a project.
  ☆42Updated 5 years ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆124Updated 7 years ago
• victims / victims-cve-db
  CVE database store
  ☆132Updated 5 years ago
• breenmachine / JavaUnserializeExploits
  ☆133Updated 10 years ago
• kohsuke / youdebug
  Non-interactive Java debugger with Groovy
  ☆80Updated last year
• mveytsman / dilettante
  Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
  ☆160Updated 10 months ago
• fergarrui / custom-bytecode-analyzer
  Java bytecode analyzer customizable via JSON rules
  ☆73Updated 7 years ago
• Cisco-AMP / java_security
  ☆14Updated 6 years ago
• thesp0nge / owasp-orizon
  Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
  ☆145Updated 8 years ago
• cdaller / security_taint_propagation
  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.
  ☆29Updated 7 years ago
• shawnmckinney / remote-code-execution-sample
  Demonstrate how usage of the Java Security Manager can prevent Remote Code Execution (RCE) exploits.
  ☆25Updated 2 years ago
• frohoff / jdeserialize
  From https://code.google.com/p/jdeserialize/
  ☆35Updated 11 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆216Updated last year
• matthiaskaiser / jmet
  Java Message Exploitation Tool
  ☆510Updated 3 years ago
• ssexxe / XXEBugFind
  A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
  ☆72Updated 11 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆384Updated 3 years ago