GadgetExplorer is a .NET command-line tool for finding potential deserialization gadget chains in managed applications. It scans one or more assemblies, builds a reachability graph with dispatch and callback heuristics, and reports when a deserialization entrypoint can reach a sink you care about.
☆17May 22, 2026Updated 5 months ago
Alternatives and similar repositories for GadgetExplorer
Users that are interested in GadgetExplorer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆34Sep 19, 2022Updated 4 years ago
- 一些jar包相关的漏洞☆28May 26, 2026Updated 4 months ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack☆36Aug 27, 2025Updated last year
- 9vms Global Cloud Servers: Starting at $49.95/month — Enterprise Dedicated Servers with Unlimited Traffic & High-Performance Bare Metal☆95Oct 7, 2026Updated 2 weeks ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 11 months ago
- Apache Axis 组件漏洞利用方法☆19Sep 10, 2022Updated 4 years ago
- TailNG UI is a signal-first Angular component library with Material-like components, framework-agnostic styling, and support for Angular …☆16Oct 9, 2026Updated 2 weeks ago
- A ML-based tyre strategy engine based on real-time F1 data☆30Oct 15, 2026Updated last week
- 【Remain Fix】【测试项目 仍需修复】RexJava 是一个用 Go 语言编写的 Java 序列化流解析库，从 Ruby 的 rex-java 库移植而来。该库专门用于安全 研究和渗透测试，能够解析和构建 Java 对象序列化格式的二进制流。Generated By …☆19Nov 16, 2025Updated 11 months ago
- 思拓内容管理系统媒体版-新华智云新闻报道网上传播分析系统数据上报功能☆10Oct 28, 2019Updated 6 years ago
- [ALL IN ONE] Everything that I shared to public about Cloud Security is here.☆66Apr 19, 2025Updated last year
- ☆15Aug 27, 2020Updated 6 years ago
- 整理容器逃逸相关的漏洞和exploits.☆15Apr 17, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Metadata-first trust control plane for authorized security workflows, evidence retention, release trust, and business-flow proof.☆14Aug 11, 2026Updated 2 months ago
- CVE-2021-22192☆12Apr 28, 2021Updated 5 years ago
- Java反序列化字节码生成器☆11May 30, 2026Updated 4 months ago
- Parametric waveguide and horn designer with real-time 3D preview, built-in BEM simulation (Metal-accelerated), CAD round-trip, and measur…☆18Updated this week
- Collection of HTTP scanners and fuzzers.☆11Jan 23, 2025Updated last year
- Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandb…☆21Aug 15, 2026Updated 2 months ago
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆592Feb 7, 2026Updated 8 months ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- 自己零零散散研究以及收集的一些免杀技巧，以便为后续查阅，拓宽思路☆14Dec 11, 2019Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆283Apr 16, 2026Updated 6 months ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆233Jun 5, 2026Updated 4 months ago
- Header-only C++20 audio DSP for real-time and offline processing. Filters, effects, analog circuit models, automatic dynamics, stereo too…☆19Oct 13, 2026Updated last week
- ☆11Nov 17, 2024Updated last year
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated last year
- IIS 模块后门☆12Feb 23, 2023Updated 3 years ago
- ☆13Dec 22, 2020Updated 5 years ago
- AlterHive（幻巢）是一款面向攻防演练、红蓝对抗和安全研究场景的高交互智能欺骗蜜罐平台。平台以虚拟拓扑、会话记忆、规则引擎和多 Agent 欺骗规划为核心，将攻击者/渗透Agent引导进可控的“子网幻象”环境中，帮助防守方观察攻击意图、拖延攻击节奏、保护真实目标。☆154Jul 15, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- RootHawkX 是一个 Linux 本地安全测试终端工具,本项目基于RootHawk进行修改，集成了更多漏洞利用模块。☆47Jul 5, 2026Updated 3 months ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- RTS game inspired by AOE. using herd algorithm and crowd dynamics, Genetic algorithms, Neural Network, Powered by Urho3D☆14Oct 16, 2026Updated last week
- memory-shell for hook tcp connection and impl origin socks5 proxy☆43Aug 5, 2025Updated last year
- e2e encrypted secret sharing via p2p exchanges & embedded vaults☆12Oct 3, 2026Updated 2 weeks ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆109Nov 7, 2024Updated last year
- share keet room invite via http link☆12Aug 21, 2026Updated 2 months ago