git
ask
hub
Privacy
Terms
Sign in with GitHub
mbechler/marshalsec
↗
Stars ·
3,695
Language ·
Java
License ·
MIT
Simplify and Visualize This Repo
Scan the safety of this repo
Self Host this repo
Check out more work of Developer: mbechler
Ask anything about this repo to start.
Help me build the marshalsec JAR using Java 8 and Maven and generate an XStream deserialization payload to test against my own application.
I want to check whether my Java app is vulnerable to Jackson deserialization attacks, help me use marshalsec to generate a payload and set up a local listener to confirm execution.
Help me understand how JNDI injection payloads in marshalsec relate to the Log4Shell vulnerability and what makes them dangerous.
Walk me through using marshalsec to automatically enumerate all available gadget chains for a specific Java marshalling library.
Help me determine which marshalsec gadget chains work with only the standard Java runtime versus which require additional third-party jars in the classpath.
Full explanation on explaingit →
📎
Send
By chatting or signing in you agree to the
Terms
and chat-message logging (revocable in
History
).