offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

#deserialization

6 results

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

All-in-one plugin for the detection and exploitation of Java deserialization vulnerabilities.

PHP unserialize() payloads along with a tool to generate them.

Deserialization payload generator for a variety of .NET formatters.

Probe endpoints consuming Java serialized objects for fingerprinting.

Generates payloads that exploit unsafe Java object deserialization.