
gadgetinspector
A byte code analyzer for finding deserialization gadget chains in Java applications
binary-analysisexploit-frameworkspenetration-testing+2
1.1k

A byte code analyzer for finding deserialization gadget chains in Java applications

Proof-of-concept exploit for BlueKeep (CVE-2019-0708) enabling remote code execution on Windows via RDP, with implementations in Python, Java, C++,…

Exploit for CVE-2018-2628, a Java deserialization vulnerability in Oracle WebLogic Server, enabling remote code execution.