GadgetExplorer is a .NET command-line tool for finding potential deserialization gadget chains in managed applications. It scans one or more assemblies, builds a reachability graph with dispatch and callback heuristics, and reports when a deserialization entrypoint can reach a sink you care about.
☆17May 22, 2026Updated 5 months ago
Alternatives and similar repositories for GadgetExplorer
Users that are interested in GadgetExplorer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A pure TypeScript/JavaScript decompiler for Java bytecode. Runs in browsers and Node.js — no JVM, WebAssembly, or runtime dependencies.☆23Oct 27, 2026Updated 2 weeks ago
- Three .NET memory shells at three distinct insertion positions - HttpModule pipeline, WebSocket connection takeover, Remoting URI registr…☆14Oct 24, 2026Updated 2 weeks ago
- 一些jar包相关的漏洞☆28May 26, 2026Updated 5 months ago
- ☆34Sep 19, 2022Updated 4 years ago
- 9vms Global Cloud Servers: Starting at $49.95/month — Enterprise Dedicated Servers with Unlimited Traffic & High-Performance Bare Metal☆95Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack☆36Aug 27, 2025Updated last year
- 一个IDEA插件:一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件,复制到all-in-one文件夹,并自动添加为项目库。☆54Oct 30, 2025Updated last year
- A tool written in golang which compress using UPX and patch it with the provided PE file to make "UPX -d" flag impossible to decompress a…☆31Jan 2, 2025Updated last year
- Apache Axis 组件漏洞利用方法☆19Sep 10, 2022Updated 4 years ago
- A ML-based tyre strategy engine based on real-time F1 data☆30Nov 1, 2026Updated last week
- 【Remain Fix】【测试项目 仍需修复】RexJava 是一个用 Go 语言编写的 Java 序列化流解析库,从 Ruby 的 rex-java 库移植而来。该库专门用于安全研究和渗透测试,能够解析和构建 Java 对象序列化格式的二进制流。Generated By …☆18Nov 16, 2025Updated 11 months ago
- TailNG UI is a signal-first Angular component library with Material-like components, framework-agnostic styling, and support for Angular …☆15Updated this week
- [ALL IN ONE] Everything that I shared to public about Cloud Security is here.☆66Apr 19, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 思拓内容管理系统媒体版-新华智云新闻报道网上传播分析系统数据上报功能☆10Oct 28, 2019Updated 7 years ago
- 整理容器逃逸相关的漏洞和exploits.☆15Apr 17, 2024Updated 2 years ago
- Metadata-first trust control plane for authorized security workflows, evidence retention, release trust, and business-flow proof.☆14Aug 11, 2026Updated 3 months ago
- Java反序列化字节码生成器☆11May 30, 2026Updated 5 months ago
- CVE-2021-22192☆12Apr 28, 2021Updated 5 years ago
- Collection of HTTP scanners and fuzzers.☆11Jan 23, 2025Updated last year
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆234Jun 5, 2026Updated 5 months ago
- 《深入JDBC安全:特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆591Feb 7, 2026Updated 9 months ago
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆285Apr 16, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- create nuclei template skills for agent☆17Oct 7, 2026Updated last month
- IIS 模块后门☆12Feb 23, 2023Updated 3 years ago
- Design apps visually. AI builds them for you. Zero coding.... Created at https://coslynx.com☆13Oct 12, 2026Updated last month
- ☆11Nov 17, 2024Updated last year
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆549Mar 6, 2025Updated last year
- fastjson-1.2.83-gadget-rce漏洞利用工具☆19Jul 22, 2026Updated 3 months ago
- The AI runtime optimized for Apple Silicon. Configure a fleet of machines. Define missions and launch complex task graphs. Monitor everyt…☆12Updated this week
- e2e encrypted secret sharing via p2p exchanges & embedded vaults☆12Nov 4, 2026Updated last week
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- memory-shell for hook tcp connection and impl origin socks5 proxy☆43Aug 5, 2025Updated last year
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated last year
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- 使用 Docker 一键构建 JDK 源码的 CodeQL 数据库,方便使用 CodeQL 查找 JDK 中的数据。☆26May 14, 2025Updated last year
- 在不开额外端口的情况下,基于ebpf和xdp实现的一个简易的可通过特定数据包激活并执行命令的后门☆13Jan 30, 2026Updated 9 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆109Nov 7, 2024Updated 2 years ago
- Neuroscience-inspired memory for AI agents — sleep cycles that rewrite and strengthen knowledge over time. TypeScript, PostgreSQL, MCP.☆15Oct 26, 2026Updated 2 weeks ago
Are these results useful?