irsdl/ysonet

Deserialization payload generator for a variety of .NET formatters

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

JNDIExploit or a ysoserial.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the last mile.

Java Vulnerability Exploitation Platform

DCOM in memory and fileless lateral movement techniques through .Net deserilization

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters