ysoserial.net
A payload generator that creates malicious deserialization payloads for testing .NET applications against insecure deserialization vulnerabilities.
A payload generator that creates malicious deserialization payloads for testing .NET applications against insecure deserialization vulnerabilities.
Checked October 2026.
ysoserial.net is a deserialization payload generator designed for .NET applications and frameworks.
The tool creates malicious payloads that exploit deserialization vulnerabilities in various .NET formatters including BinaryFormatter, SoapFormatter, and NetDataContractSerializer.
It generates serialized objects that can execute arbitrary code when deserialized by vulnerable .NET applications, making it useful for penetration testing and security research.
The tool supports multiple .NET serialization formats and can be used to test applications for insecure deserialization flaws that could lead to remote code execution.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about ysoserial.net: features, pricing and alternatives.
ysoserial.net is a product in the Penetration Testing category. It covers .NET and Payload Generation.
ysoserial.net is free. Download and setup instructions are at https://github.com/pwntester/ysoserial.net/.
Alternatives to ysoserial.net listed on CybersecTools:
Compare all ysoserial.net alternatives at https://cybersectools.com/alternatives/ysoserialnet
ysoserial.net is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A mini webserver with FTP support for XXE payloads
A tool to help exploit XXE vulnerabilities by sending a crafted XML file to the server and parsing it to extract the data.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Automated pentesting platform for web apps and APIs with AI-driven exploit validation.
A comprehensive database of exploits and vulnerabilities for researchers and professionals
A tool for analyzing and visualizing control relationships and privilege escalation paths within Active Directory environments using graph-based representations.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
