#deserialization

deser-node
deser-node

NodeJS deserialization payload generator.

Freddy Deserialization Bug Finder
Freddy Deserialization Bug Finder

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

Java Deserialization Scanner
Java Deserialization Scanner

All-in-one plugin for the detection and exploitation of Java deserialization vulnerabilities.

PHPGGC
PHPGGC

PHP unserialize() payloads along with a tool to generate them.

ysoserial.net
ysoserial.net

Deserialization payload generator for a variety of .NET formatters.

GadgetProbe
GadgetProbe

Probe endpoints consuming Java serialized objects for fingerprinting.

ysoserial
ysoserial

Generates payloads that exploit unsafe Java object deserialization.