A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

JNDIExploit or a ysoserial.

Collection of bypass gadgets to extend and wrap ysoserial payloads

Converts text containing words that represent numbers into decimal representation. e.g. Twenty five -> 25

A byte code analyzer for finding deserialization gadget chains in Java applications