fastjson2 ≤ 2.0.62 利用多态反序列化（ObjectReaderSeeAlso）+ URLClassLoader.findClass 点号转斜杠替换，绕过 AutoType 白名单及 JDK ClassLoader.checkName，实现远程代码执行。 - heart147/fastjson2-rce

fastjson-1.2.83. Contribute to mua520/fastjson-1.2.83 development by creating an account on GitHub.

FastjsonAutoPwn. Contribute to milantgh/FastjsonAutoPwn development by creating an account on GitHub.

Fastjson1.2.83主动检测burpsuite插件Bp插件. Contribute to Charles-Tracy/Fastjson1.2.83 development by creating an account on GitHub.

Contribute to w0x68y/Fastjson1.2.83-JsonType-RCE-Demo development by creating an account on GitHub.

CTF Java 反序列化 POC 脚手架项目生成工具. Contribute to CertStone/ctf-pocgen development by creating an account on GitHub.

java原生序列化、dubbo序列化的反序列化工具. Contribute to HeHeHePerson/SerializationDumper2c development by creating an account on GitHub.

Java反序列化漏洞利用工具集 — 多种Gadget Chain实现(PriorityQueue/Spring MIFB/纯Python)，适配RASP绕过场景 - 2580369ll/java-deserialization-gadgets

Java反序列化+RASP绕过CTF Writeup — Jackson POJONode + JdbcRowSetImpl绕过TemplatesImpl/setAccessible0拦截 - 2580369ll/bypassit-rasp-bypass

基于反向代理的轻量级Web应用防火墙原型。纯Python Socket实现请求拦截引擎+Django可视化后台管理，支持SQL注入、XSS、RCE、XXE、反序列化等10+种攻击检测，含黑白名单、多站点代理、规则热加载等功能。 - cvv-1/Lightweight-Web-Application-Firewall-Based-on-Rule-Matching

TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。 - CurlySean/TongWebExploit

Fastjson / Jackson 反序列化漏洞自动化检测工具，支持 LDAP / RMI / DNSLog / 本地 HTTP 多种回连验证方式 - fewftybet/FastJsonExp

fastjson1.*转Jackson. Contribute to lyalexzz/fastjson-convert-jackson development by creating an account on GitHub.

用 AI 来操作JYso，并在AI遇到反序列化和JNDI注入情况自动调用. Contribute to qi4L/JYso-skills development by creating an account on GitHub.

基于burp API 2025版本开发的fastjson/log4j 全版本的payload扫描，支持的dnslog：ceye、collaborator（burp自带） - Jaysen13/jaysenscan

java反序列化学习的一些小项目. Contribute to ca5ll41ng/java- development by creating an account on GitHub.

基于 Y4er/ysoserial 与 marshalsec 的 Java 反序列化利用 GUI 工具，集成 Payload 生成、JNDI Reference、LDAP 反序列化与调用图编辑。 - wr0ld/YsoGUI

学习Java反序列化漏洞链的Demo. Contribute to hentai777ok/JavaGadgetChainTest development by creating an account on GitHub.

TongWebEJB反序列化漏洞检测工具——Burp插件. Contribute to Axyanzzzz/TongWebEJBScan-Burp development by creating an account on GitHub.

Fastjson 1.2.24 & 1.2.47 & 1.2.80 反序列化漏洞完整复现环境. Contribute to ws91233/Fastjson-lab development by creating an account on GitHub.