ysoserial Logo

ysoserial

0
Free
Visit Website

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. This tool is designed to help developers and security researchers identify and exploit vulnerabilities in Java applications. ysoserial is a command-line tool that generates payloads for various Java deserialization vulnerabilities, including those in Apache Commons Collections, Apache Commons BeanUtils, and others. ysoserial is a powerful tool for identifying and exploiting Java deserialization vulnerabilities, and can be used by developers, security researchers, and penetration testers to improve the security of their applications. ysoserial is available for download on GitHub.

FEATURES

ALTERNATIVES

A static analysis tool for PE files that detects malicious behavior and provides information for manual analysis.

Compact C framework for analyzing suspected malware documents and detecting exploits and embedded executables.

A powerful tool for detecting and identifying malware using a rule-based system.

A simple XSS scanner tool for identifying Cross-Site Scripting vulnerabilities

A tool for reading Portable Executable (PE) files with detailed information about the file structure.

Parse YARA rules into a dictionary representation.

FLARE-VM is a collection of software installation scripts for Windows systems designed for setting up and maintaining a reverse engineering environment on a virtual machine.

A simple framework for extracting actionable data from Android malware

PINNED