41554 blogs · 4,756,248 posts Claim your blog

Record · corpus.blog/posts/01a0b87b-2ea3-72e6-99b3-011d3847842e

Making Serialization Gadgets by Hand - Java

vulncheck.com · published 5 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at vulncheck.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 16
Words captured: 4,305

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Making Serialization Gadgets by Hand - .NET Read at the source ↗

https://docs.oracle.com/javase/8/docs/platform/serialization/spec/protocol.html

docs.oracle.com

https://gchq.github.io/CyberChef/

gchq.github.io

https://github.com/phith0n/zkar

github.com

https://www.vulncheck.com/blog/making-java-gadgets/zkar.txt

vulncheck.com

https://github.com/vulncheck-oss/go-exploit/tree/main/java

github.com

https://en.wikipedia.org/wiki/Magic_number_(programming

en.wikipedia.org

https://github.com/vulncheck-oss/go-exploit/blob/eba8be1bfcd93c203cf8efd00a60e9c086d261f1/java/gadgets.go

github.com

https://github.com/vulncheck-oss/go-exploit

github.com

Tales from the Exploit Mines: Gladinet Triofox CVE-2025-12480 RCE Read at the source ↗

Metro4Shell: Exploitation of React Native’s Metro Server in the Wild Read at the source ↗

https://console.vulncheck.com/browse/kev

console.vulncheck.com

https://console.vulncheck.com/browse

console.vulncheck.com

https://www.vulncheck.com/product/initial-access-intelligence

vulncheck.com

https://www.vulncheck.com/product/ip-intelligence

vulncheck.com

https://www.vulncheck.com/product/exploit-intelligence

vulncheck.com