Java 安全利用链生成器 & JNDI 服务 — 集成多种反序列化利用链、JNDI 注入、Shiro/Fastjson/SnakeYAML 漏洞利用的综合工具 - testitok/Lyrasuite

不出网利用：上传jar包写入内存马. Contribute to Aalex88/fastjson_1.2.83_memshell development by creating an account on GitHub.

一个轻量的用于挖掘反序列化利用链的分析工具。. Contribute to Qmoyue/Just-SAST development by creating an account on GitHub.

Sd0p-V3.5 是款面向 PHP 反序列化漏洞的 CTF 自动化 Payload 生成工具。提供 PyQt6 图形界面，集成 PHP 代码解析、POP 链推导、字符串逃逸构造、内置类利用、PHAR 反序列化、HTTP 投递与 POP 链可视化等能力。 - LingBale/Sd0p-CTF-DeserializationTool

一个能自动生成pickle反序列化的工具. Contribute to Zomnap/Taco development by creating an account on GitHub.

一个简单的用于挖掘反序列化利用链的分析工具。. Contribute to Qmoyue/Just development by creating an account on GitHub.

fastjson 白名单hash碰撞. Contribute to Superman-L/QVD-2026-45876 development by creating an account on GitHub.

PHP反序列化Payload构造工具. Contribute to Zekon-Xu/PHP-Deserialization-Payload-Generator development by creating an account on GitHub.

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

Java反序列化靶场，涵盖CB、CC、Dubbo、Fastjson、Hessian、Jndi、Log4j、Shiro、Weblogic等Java反序列化场景 - TaoLjx/JavaDeserialization

Java 反序列化多态攻击面静态扫描器 + 利用面确证沙箱 + 默认配置安全基线. Contribute to joysinleung/deser-radar development by creating an account on GitHub.

Contribute to changjiaqiu/fastjson-testDemo development by creating an account on GitHub.

fastjson2 ≤ 2.0.62 利用多态反序列化（ObjectReaderSeeAlso）+ URLClassLoader.findClass 点号转斜杠替换，绕过 AutoType 白名单及 JDK ClassLoader.checkName，实现远程代码执行。 - heart147/fastjson2-rce

fastjson-1.2.83. Contribute to mua520/fastjson-1.2.83 development by creating an account on GitHub.

FastjsonAutoPwn. Contribute to milantgh/FastjsonAutoPwn development by creating an account on GitHub.

Fastjson1.2.83主动检测burpsuite插件Bp插件. Contribute to Charles-Tracy/Fastjson1.2.83 development by creating an account on GitHub.

Contribute to w0x68y/Fastjson1.2.83-JsonType-RCE-Demo development by creating an account on GitHub.

CTF Java 反序列化 POC 脚手架项目生成工具. Contribute to CertStone/ctf-pocgen development by creating an account on GitHub.

java原生序列化、dubbo序列化的反序列化工具. Contribute to HeHeHePerson/SerializationDumper2c development by creating an account on GitHub.