Repositories list

• MaintainForwardPorting-ICSME2025

  Public
  0•0•0•0•Updated Jul 26, 2025Jul 26, 2025

• Gleipner

  Public
  A benchmark for Java gadget chain detecting algorithms.

  Java

  •0•9•0•0•Updated Jun 20, 2025Jun 20, 2025

• SeeCFI

  Public
  Python

  •0•1•0•0•Updated Oct 15, 2024Oct 15, 2024

• Gadgecy

  Public
  A tool and dataset for detecting dependencies used in known Java gadget chains.

  Python

  •

  GNU General Public License v3.0

  •0•2•0•0•Updated Jun 15, 2024Jun 15, 2024

• confuzzion

  Public
  Confuzzion is a Java Virtual Machine (JVM) fuzzer generating Java programs to find bugs and vulnerabilities in the Java VM.

  javajvmbug+ 13crashesvulnerabilitycode-generationvulnerabilitiesfuzzersootjava-virtual-machine+ 6

  Java

  •2•5•0•1•Updated May 24, 2024May 24, 2024

• ysoserial

  Public
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Java

  •

  MIT License

  •1.8k•0•0•0•Updated Dec 27, 2023Dec 27, 2023

• AndroidsJCL-SecDev23

  Public
  Artifacts of our SecDev 2023 paper "An In-Depth Analysis of Android’s Java Class Library: its Evolution and Security Impact"

  securityjvmclass+ 6vulnerabilitydalvikopenjdkexposuretlshandroid

  Java

  •0•0•0•0•Updated Oct 4, 2023Oct 4, 2023

• javaDesatChecker.web

  Public
  Web pages and other artefacts generated with javaDesatChecker

  HTML

  •0•0•0•0•Updated Jun 13, 2023Jun 13, 2023

• java-deserialization-rce

  Public
  An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

  0•1•0•0•Updated Jul 15, 2022Jul 15, 2022

• pshape

  Public
  Inspector-gadget (a.k.a. PSHAPE - Practical Support for Half-Automated Program Exploitation) is an open source tool which assists analysts in exploit development. It discovers gadgets, chains gadgets together, and ensures that side effects such as register dereferences do not crash the program.

  exploitgadgetspshape+ 1inspector-gadget

  0•0•0•0•Updated Jul 7, 2022Jul 7, 2022

• inspector-gadget

  Public
  Inspector-gadget (a.k.a. PSHAPE - Practical Support for Half-Automated Program Exploitation) is an open source tool which assists analysts in exploit development. It discovers gadgets, chains gadgets together, and ensures that side effects such as register dereferences do not crash the program.

  exploitregistervulnerability+ 4gadgetsgadget-chainpshapeinspector-gadget

  Python

  •

  GNU Lesser General Public License v2.1

  •4•25•0•0•Updated Dec 17, 2019Dec 17, 2019