Alternatives and similar repositories for marshalsec:

Users that are interested in marshalsec are comparing it to the libraries listed below

• welk1n / JNDI-Injection-Exploit
  JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
  ☆2,682Updated 2 years ago
• frohoff / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆8,156Updated last year
• GrrrDog / Java-Deserialization-Cheat-Sheet
  The cheat sheet about Java Deserialization vulnerabilities
  ☆3,086Updated last year
• tarunkant / Gopherus
  This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  ☆3,055Updated 2 years ago
• veracode-research / rogue-jndi
  A malicious LDAP server for JNDI injection attacks
  ☆1,029Updated last year
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,458Updated 5 years ago
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆3,922Updated last year
• JackOfMostTrades / gadgetinspector
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,029Updated 3 years ago
• knownsec / pocsuite3
  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  ☆3,708Updated last month
• sensepost / reGeorg
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆3,076Updated last month
• NickstaDB / SerializationDumper
  A tool to dump Java serialization streams in a more human readable form.
  ☆1,017Updated 10 months ago
• whwlsfb / Log4j2Scan
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆801Updated last year
• L-codes / Neo-reGeorg
  Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
  ☆3,054Updated 2 months ago
• ambionics / phpggc
  PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
  ☆3,442Updated last week
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆3,171Updated last month
• pwntester / ysoserial.net
  Deserialization payload generator for a variety of .NET formatters
  ☆3,379Updated 4 months ago
• kost / dvcs-ripper
  Rip web accessible (distributed) version control systems: SVN/GIT/HG...
  ☆1,726Updated 9 months ago
• Ascotbe / Kernelhub
  Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability detai…
  ☆2,983Updated 2 years ago
• JoyChou93 / java-sec-code
  Java web common vulnerabilities and security code which is base on springboot and spring security
  ☆2,500Updated 4 months ago
• lijiejie / ds_store_exp
  A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
  ☆1,628Updated last year
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,619Updated 4 months ago
• d3vilbug / HackBar
  HackBar plugin for Burpsuite
  ☆1,563Updated 4 years ago
• cdk-team / CDK
  📦 Make security testing of K8s, Docker, and Containerd easier.
  ☆4,164Updated last month
• WangYihang / GitHacker
  🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.
  ☆1,506Updated 3 months ago
• PortSwigger / turbo-intruder
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
  ☆1,592Updated 2 weeks ago
• lijiejie / GitHack
  A `.git` folder disclosure exploit
  ☆3,325Updated 2 years ago
• zer0yu / Awesome-CobaltStrike
  List of Awesome CobaltStrike Resources
  ☆4,128Updated last year
• tangxiaofeng7 / CVE-2021-44228-Apache-Log4j-Rce
  Apache Log4j 远程代码执行
  ☆82Updated last year
• The-Z-Labs / linux-exploit-suggester
  Linux privilege escalation auditing tool
  ☆5,909Updated last year
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,396Updated 6 months ago