The cheat sheet about Java Deserialization vulnerabilities

A helpful Java Deserialization exploit framework.

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

xmind\code\articles for my personal blog 个人博客上的资源备份存储，也是个人分享的汇总

Compiled dataset of Java deserialization CVEs

an Evil Java RMI Registry.

Library for manually creating Java serialization data.

Java deserialization tool for creating encrypted and HMAC protected payloads.

First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).

maptool unauthenticated rce exploit <1.8.0 beta2b

Enhanced fork of JexBoss, Apache 2.0, with a Shodan driven bulk scan mode, quiet mode and live progress bar. Authorized and educational use only.