deserialization

4 tools and resources

NEW

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

A deserialization payload generator for .NET formatters

A cheat sheet for pentesters and researchers about deserialization vulnerabilities in various Java (JVM) serialization libraries.

A categorized collection of bug bounty write-ups for various vulnerabilities.