frohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

JavaDockerfilejavaserializationexploitjvmdeserializationgadgetpocvulnerabilityjavadeser
This is stars and forks stats for /frohoff/ysoserial repository. As of 27 Apr, 2024 this repository has 6767 stars and 1693 forks.

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections (3.x and 4.x), Spring Beans/Core (4.x), and Groovy (2.3.x). Later updated to include additional gadget chains for JRE <= 1.7u21 and several other libraries. ysoserial is a collection of utilities and property-oriented...
Read on GithubGithub Stats Page
repotechsstarsweeklyforksweekly
bobangajicsm/react-portfolio-websiteJavaScriptSCSSHTML54107500
fabricjs/fabric.jsJavaScriptTypeScriptOther25.9k03.4k0
handsontable/handsontableJavaScriptTypeScriptOther18.3k02.9k0
typicode/json-serverJavaScriptHTMLCSS68.8k06.8k0
jaywcjlove/awesome-macJavaScriptDockerfile64k06k0
dundunnp/auto_xuexiqiangguoJavaScript2.6k09600
DataDog/documentationJavaScriptHTMLPython30708550
GoogleChrome/lighthouseJavaScriptCSSTypeScript27.1k09.5k0
leonardomso/33-js-conceptsJavaScript59.1k08.4k0
CacheControl/json-rules-engineJavaScriptTypeScriptShell2.2k04190